from:"Christian Sciberras"

Sadly you can't download routers and internet connections...especially
without an internet connection.

But I suppose you could be the regular joe and steal from your neighbours'
bandwidth (it's a human right, remember? your neighbour doesn't have a
right to keep the internets to himself!!!).

/rant




On Sat, Jan 28, 2012 at 10:33 PM, Laurelai laure...@oneechan.org wrote:

  On 1/28/2012 3:13 PM, Julius Kivimäki wrote:

 Of course I wouldn't, downloading a car would be like stealing a car.
 Piracy is horrible and all the boats used by the pirate scum should be
 taken away.


 2012/1/28 Laurelai laure...@oneechan.org

 On this topic i saw this
 https://thepiratebay.org/torrent/6960965/1970_Chevelle_Hot-Rod_3d_model
 , real question is would you download a car if you could?

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


  If you took away their boats they would just download more...duh.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] when did piracy/theft become expression of freedom

That has always been viewed from the consumer perspective.

If you look at it from the producers' perspective, you'll see their right
to withhold their creative
content until you pay something back.

While the terminology is not correct, it doesn't mean you can abuse it and
expect people
to waste time for you.


Another thing to note, if artists, software companies etc were so nice to
actually want
to give all this stuff for free, I'm pretty sure no one is forcing them to
sell their content.
So don't talk about the they're not loosing anything bullshit to me.

Laurelai - Yes, I'm sure McDonalds have acknowledged your human right to a
free
internet connection. Next thing they'll be feeding you for free as well





On Sat, Jan 28, 2012 at 11:26 PM, valdis.kletni...@vt.edu wrote:

 On Fri, 27 Jan 2012 19:02:09 PST, Zach C. said:

  If you buy an album used, the seller generally loses possession of it,
 you
  gain possession of it at a reduced cost, and the original purchase still
  gave the original seller and producer value.

 Note that if I shoplift a CD that sucks and isn't worth the $14.99 sticker
 price, I
 have deprived the producer of the ability to sell it to somebody else.
  That's
 the crucial point that underlies our social concept of theft - if I take
 it from
 you, you don't have it anymore.

 If I copy an album that isn't worth the sticker price, and which I would
 not
 have purchased at that price, two things of note happen:

 1) As much as the labels wish it were so, they can't count that as lost
 revenue because it wouldn't have acccrued to them anyhow, any more than a
 car
 dealership can legitimately call it lost revenue if I walk onto their
 lot,
 tell the salescritter they're crazy if they think I'll pay $28K for a given
 car, and walk off the lot. (Now, if they want to count the Damn, we lost
 the
 $4.99 that guy *would* have paid if we charged that instead of $14.99,
 they're
 welcome to that. :)

 2) More importantly, they still have the original bits and are free to look
 for other suckers who *will* pay $14.99.

 For the record, all my media is legitimately acquired, though a large
 portion
 *was* obtained used and if the producers don't like that, they're welcome
 to go
 re-read first sale doctrine ;)  Just trying to make people actually
 engage
 their neurons - this stuff is *not* easy to sort out, because intellectual
 property and digital information do *not* behave the same as cars and cows
 in
 the physical world, and unintended consequences of policy decisions are all
 *over* the place.  (DMCA anti-circumvention clause prohibiting me from
 fair-use
 accessing my own media, I'm looking at you. :)


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] when did piracy/theft become expression of freedom

 Copyrights exist for consumers, at least according to the US
 constitution: snip

And? I'm talking about the simple fact that the producer has the right
to earn money from his creation. Copyright is just a tool.

 Copyrights do not exist for the benefit of producers; that is only a
 means to an end.  The point of the copyright system is to benefit the
 general public.

Exactly. So, in your own words, producers are at a loss.

 ...which is not the same as their right to prevent you from making
 copies of their work.

Oh come on. Who are you trying to feed that to?
You know damn well current court cases target 'copyright infringement'
for non-personal usesuch as copying such material and selling it for
profit.

Why don't you just admit many people out there are afraid of loosing
their little racket?

 Then tell me what they lost.  Can you prove that someone who downloaded
 a song would have spent money on the song if it had not been available
 for download?  The argument that losses are incurred for every download
 has always been baseless and always will be.

Can you prove that a company/group can live on by handing out free copies
of their song on the internet? How many companies out there do that?

 Industries need to adapt to the times, or else they die.  What makes
 recording, movie production, etc. so special?

Lets turn this to a different parallel issue, open source. Last I checked,
income for opensource projects tend to come from one of the following:
- advertisements
- paid support
- training

How many such activities play well with records companies?

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] when did piracy/theft become expression of freedom

 Actually, *most* bands that make money do so off the concert tours - tickets 
 and
 tshirts is where the actual money is at, not the album sales.

So why bother with album sales in the first place?

This is the same with free/commercial software. At the end of the day
the creator decides
the sales strategy.


The only thing I can see in this is that the recording industry really
needs to grow up
to the times, but piracy is not a solution nor the means to one, just
like DDoSing facebook
is not the means to the removal of a certain bill/law (arguably, to
the contrary).

The recording companies have every right to retaliate just as the FBI
has every right to
arrest suspects involved in these childish acts.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VNC viewers: Clipboard of host automatically sent to remote machine

2012-01-25 Thread Christian Sciberras

That's not necessarily true. On windows you can add custom clipboard formats
that would contain a 'link' to the original source, causing the data to be
actually
passed when pasting. An example of this is when one copy+pastes a file.
See the Windows Clipboard API for more info.

Chris.



On Wed, Jan 25, 2012 at 10:54 AM, Mario Vilas mvi...@gmail.com wrote:

 I'm not sure how the clipboard works in Linux desktops (I understand
 it's a little different), but at least in Windows environments data
 has to be copied to the clipboard when you hit Ctrl-C. It can't be
 copied when you hit Ctrl-V because then the applications wouldn't know
 if there is anything to paste (like you said, the button would be
 grayed).

 So to replicate this behavior it's necessary to send the data as it's
 copied, not as it's pasted. Most (not all, but most) desktop systems
 assume clipboard data can be freely shared with all applications and
 don't have any kind of isolation at all. VNC was designed with the
 same idea.

 The bottom line is, the problem here is using VNC for what Ben is
 using it. There are many more problems with that scenario and
 clipboard sharing may be the least of them.

 On Wed, Jan 25, 2012 at 8:44 AM, Peter Osterberg j...@vel.nu wrote:
  On 01/24/2012 07:18 PM, Mario Vilas wrote:
  Guys, could you please read carefully everything before you reply?
  I read carefully. It still didn't make sense, though.
 
  And you wouldn't be allowed to use copypaste while you edit sensitive
  documents either, I guess?
  I don't know how you could get to such a conclusion from what I wrote.
 
  You're reporting that if you copy and paste sensitive information and
  connect to a VNC session your clipboard data gets sent to the remote
  machine. That's pretty obvious and not a security hole that needs to
  be plugged.
 
  I don't think that is what Ben is saying. The clipboard get sent to the
  the server even before it is pasted, this happens without the user
  knowing of it.
 
  Notepad would have the paste button grayed otherwise, if the clipboard
  is empty, right? So it is already on the server before paste is pressed.
 
  So what ever was in the clipboard buffer is transmitted to the server on
  connection.
 
  This is at least the assumption I make from reading Ben's mails. Or...
  Is there a cliboard flag saying there is something on the clipboard, but
  it isn't transmitted until the user actually pastes? I haven't really
  got any experience with how the clipboard feature is implemented. My
  assumption is however that it has to be on server for notepad to be
  aware that Paste shouldn't be grayed out...
 
  I think Ben's report make complete sense actually, it would be better to
  have the clipboard feature as a default. Security before features... =)
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/



 --
 “There's a reason we separate military and the police: one fights the
 enemy of the state, the other serves and protects the people. When the
 military becomes both, then the enemies of the state tend to become
 the people.”

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VNC viewers: Clipboard of host automatically sent to remote machine

2012-01-25 Thread Christian Sciberras

No, I only read the manual.

Now go troll somwhere else. :)

On Wed, Jan 25, 2012 at 11:35 AM, GloW - XD doo...@gmail.com wrote:

 Windows is even more secure, have you actually, read any of the code /


 On 25 January 2012 21:30, Christian Sciberras uuf6...@gmail.com wrote:
  That's not necessarily true. On windows you can add custom
 clipboard formats
  that would contain a 'link' to the original source, causing the data
 to be
  actually
  passed when pasting. An example of this is when one copy+pastes a file.
  See the Windows Clipboard API for more info.
 
  Chris.
 
 
 
  On Wed, Jan 25, 2012 at 10:54 AM, Mario Vilas mvi...@gmail.com wrote:
 
  I'm not sure how the clipboard works in Linux desktops (I understand
  it's a little different), but at least in Windows environments data
  has to be copied to the clipboard when you hit Ctrl-C. It can't be
  copied when you hit Ctrl-V because then the applications wouldn't know
  if there is anything to paste (like you said, the button would be
  grayed).
 
  So to replicate this behavior it's necessary to send the data as it's
  copied, not as it's pasted. Most (not all, but most) desktop systems
  assume clipboard data can be freely shared with all applications and
  don't have any kind of isolation at all. VNC was designed with the
  same idea.
 
  The bottom line is, the problem here is using VNC for what Ben is
  using it. There are many more problems with that scenario and
  clipboard sharing may be the least of them.
 
  On Wed, Jan 25, 2012 at 8:44 AM, Peter Osterberg j...@vel.nu wrote:
   On 01/24/2012 07:18 PM, Mario Vilas wrote:
   Guys, could you please read carefully everything before you reply?
   I read carefully. It still didn't make sense, though.
  
   And you wouldn't be allowed to use copypaste while you edit
 sensitive
   documents either, I guess?
   I don't know how you could get to such a conclusion from what I
 wrote.
  
   You're reporting that if you copy and paste sensitive information and
   connect to a VNC session your clipboard data gets sent to the remote
   machine. That's pretty obvious and not a security hole that needs to
   be plugged.
  
   I don't think that is what Ben is saying. The clipboard get sent to
 the
   the server even before it is pasted, this happens without the user
   knowing of it.
  
   Notepad would have the paste button grayed otherwise, if the clipboard
   is empty, right? So it is already on the server before paste is
 pressed.
  
   So what ever was in the clipboard buffer is transmitted to the server
 on
   connection.
  
   This is at least the assumption I make from reading Ben's mails. Or...
   Is there a cliboard flag saying there is something on the clipboard,
 but
   it isn't transmitted until the user actually pastes? I haven't really
   got any experience with how the clipboard feature is implemented. My
   assumption is however that it has to be on server for notepad to be
   aware that Paste shouldn't be grayed out...
  
   I think Ben's report make complete sense actually, it would be better
 to
   have the clipboard feature as a default. Security before features...
 =)
  
   ___
   Full-Disclosure - We believe in it.
   Charter: http://lists.grok.org.uk/full-disclosure-charter.html
   Hosted and sponsored by Secunia - http://secunia.com/
 
 
 
  --
  “There's a reason we separate military and the police: one fights the
  enemy of the state, the other serves and protects the people. When the
  military becomes both, then the enemies of the state tend to become
  the people.”
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VNC viewers: Clipboard of host automatically sent to remote machine

2012-01-25 Thread Christian Sciberras

For the record...
who are the other 'many on this list' that know you don't troll other than
your alter egos?
'course you don't troll can you quote me where I ever said VNC is
secure?

With that, I'll let you troll in peace. I have no interest talking to you
anyway... :)



On Wed, Jan 25, 2012 at 12:04 PM, GloW - XD doo...@gmail.com wrote:

 and stupidly, you forgot to addin the second PRIVT post i sent you,
 saying i meant *insecure :)
 now, go try tell me windows vnc is secure again...and, then setup a
 vnc on your box, and, under win32, try your best, when your ready,
 yell out, so i can make a compete fucking fool of ya.
 ok ?
 if this is how you want to play, i am challenging you, if i can own a
 shitty windows setup you 'secure' as best you8 can, here on fd, is
 this trolling is it ?
 its a challenge... maybe, if you read the lame rfb and, pixelisation
 via IP KVM, unfortunately for windows, it aint any different, a pixel
 is placed at X or Y, and, you can place data calls to it, from server
 wich, could be, my bot :)
 want more proof,...keep going with my challenge then.


 On 25 January 2012 21:38, Christian Sciberras uuf6...@gmail.com wrote:
  No, I only read the manual.
 
  Now go troll somwhere else. :)
 
  On Wed, Jan 25, 2012 at 11:35 AM, GloW - XD doo...@gmail.com wrote:
 
  Windows is even more secure, have you actually, read any of the code /
 
 
  On 25 January 2012 21:30, Christian Sciberras uuf6...@gmail.com
 wrote:
   That's not necessarily true. On windows you can add custom
   clipboard formats
   that would contain a 'link' to the original source, causing the data
   to be
   actually
   passed when pasting. An example of this is when one copy+pastes a
 file.
   See the Windows Clipboard API for more info.
  
   Chris.
  
  
  
   On Wed, Jan 25, 2012 at 10:54 AM, Mario Vilas mvi...@gmail.com
 wrote:
  
   I'm not sure how the clipboard works in Linux desktops (I understand
   it's a little different), but at least in Windows environments data
   has to be copied to the clipboard when you hit Ctrl-C. It can't be
   copied when you hit Ctrl-V because then the applications wouldn't
 know
   if there is anything to paste (like you said, the button would be
   grayed).
  
   So to replicate this behavior it's necessary to send the data as it's
   copied, not as it's pasted. Most (not all, but most) desktop systems
   assume clipboard data can be freely shared with all applications and
   don't have any kind of isolation at all. VNC was designed with the
   same idea.
  
   The bottom line is, the problem here is using VNC for what Ben is
   using it. There are many more problems with that scenario and
   clipboard sharing may be the least of them.
  
   On Wed, Jan 25, 2012 at 8:44 AM, Peter Osterberg j...@vel.nu wrote:
On 01/24/2012 07:18 PM, Mario Vilas wrote:
Guys, could you please read carefully everything before you
 reply?
I read carefully. It still didn't make sense, though.
   
And you wouldn't be allowed to use copypaste while you edit
sensitive
documents either, I guess?
I don't know how you could get to such a conclusion from what I
wrote.
   
You're reporting that if you copy and paste sensitive information
and
connect to a VNC session your clipboard data gets sent to the
 remote
machine. That's pretty obvious and not a security hole that needs
 to
be plugged.
   
I don't think that is what Ben is saying. The clipboard get sent to
the
the server even before it is pasted, this happens without the user
knowing of it.
   
Notepad would have the paste button grayed otherwise, if the
clipboard
is empty, right? So it is already on the server before paste is
pressed.
   
So what ever was in the clipboard buffer is transmitted to the
 server
on
connection.
   
This is at least the assumption I make from reading Ben's mails.
Or...
Is there a cliboard flag saying there is something on the
 clipboard,
but
it isn't transmitted until the user actually pastes? I haven't
 really
got any experience with how the clipboard feature is implemented.
 My
assumption is however that it has to be on server for notepad to be
aware that Paste shouldn't be grayed out...
   
I think Ben's report make complete sense actually, it would be
 better
to
have the clipboard feature as a default. Security before
 features...
=)
   
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
  
  
  
   --
   “There's a reason we separate military and the police: one fights the
   enemy of the state, the other serves and protects the people. When
 the
   military becomes both, then the enemies of the state tend to become
   the people.”
  
   ___
   Full-Disclosure - We

Re: [Full-disclosure] OT: Firefox question / poll

2011-12-20 Thread Christian Sciberras

Both?






On Tue, Dec 20, 2011 at 6:40 PM, Charles Morris cmor...@cs.odu.edu wrote:

 I'm curious what everyone's opinion is on the following question...
 esp. to any FF dev people on list:

 Do you think that the Firefox warning: unresponsive script is meant
 as a security feature or a usability feature?

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] silly PoCs continue: X-Frame-Options give you less than expected

2011-12-11 Thread Christian Sciberras

 Because it's bugtraq / full-disclosure, where people generally talk
 about vulnerabilities...

Sure thing. Complaining about patches that don't do
anythinghttp://lcamtuf.blogspot.com/2011/12/x-frame-options-or-solving-wrong.htmlis
a plus to your reputation, I guess, right? Finding tangible solutions
to your problems means that eventually you'll loose the job.

 I'm not sure I follow your drift about Firefox, I don't believe it's
 mentioned anywhere.

Indeed, you didn't mention Firefox. Someone else did.

 Why?

It's harder to predict how much it would take for a page to load,
as well as your caching concept will fail when the target in question
can only be invoked by the user. Also, there's the situation where
a simple click won't get you anywhere, for instance, in cases where
a user has to enter his credentials as well as to confirm the action.

Chris.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] OMIGOD CIQ HACKING THE WORLD.

2011-12-06 Thread Christian Sciberras

Or not...

http://vulnfactory.org/blog/2011/12/05/carrieriq-the-real-story/

On the other hand, where that l33t hacker Drew (aka xD 0x41)?
Thought he'd enlighten us with more of his awesome hacking powers on this
issue.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] OMIGOD CIQ HACKING THE WORLD.

2011-12-06 Thread Christian Sciberras

Uhm, pretty much any software entering your system has some potential to
(being) wreck(ing) havoc, be whether it is an innocent gif file or a
potentially backdoored exe.
Still, that doesn't give me the right to shout at any software vendor
baseless assumptions that simply damages its reputation.

Think about it, if this software is in fact what they say it does (and does
it pretty well) who's winning? The EFF guys? The genius that came up with
the media scam?
How many really good alternatives to it are there? Can we really blame the
company for keeping its concepts secret (consider the amount of alternative
software crap out there).

But that's just my insignificant opinion, nothing to look at, keep on going.

Meanwhile, as I promised someone, I'll do an occasional troll for the lulz*.
*Hey, at least I don't crack servers en mas under soviet direction to get
on with cocaine addiction :).

With that said, I won't say another thing on this thread. If anyone feels
compelled to keep any of this going, you know my personal email address.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] NEVER AGAIN

2011-11-22 Thread Christian Sciberras

James, could you please stop publishing emails intended for private use?

It's getting plain ridiculous the amount of crap from this list I (and the
rest) have to deal with every day.







On Tue, Nov 22, 2011 at 3:06 PM, James Rankin kz2...@googlemail.com wrote:

 Whatever

 On 22 November 2011 14:05, andrew.wallace 
 andrew.wall...@rocketmail.comwrote:

 The email is nothing to do with me or my consultancy. You need better
 analysis skills and a good lawyer.

 ---

 Andrew Wallace

   --
 *From:* James Rankin kz2...@googlemail.com
 *To:* andrew.wallace andrew.wall...@rocketmail.com
 *Cc:* Darren Martyn d.martyn.fulldisclos...@gmail.com; Antony
 widmal antony.wid...@gmail.com; xD 0x41 sec...@gmail.com;
 Martin Allert all...@arago.de; full-disclosure@lists.grok.org.uk
 full-disclosure@lists.grok.org.uk; phocean 0...@phocean.net;
 Nikolay Kichukov hijac...@oldum.net; valdis.kletni...@vt.edu 
 valdis.kletni...@vt.edu
 *Sent:* Tuesday, November 22, 2011 2:01 PM

 *Subject:* Re: [Full-disclosure] NEVER AGAIN

 Strange. Your other personality said much the same thing.

 On 22 November 2011 13:57, andrew.wallace 
 andrew.wall...@rocketmail.comwrote:

 You're making the worst mistake possible for yourself.

 ---

 Andrew Wallace

   --
 *From:* James Rankin kz2...@googlemail.com
 *To:* andrew.wallace andrew.wall...@rocketmail.com
 *Cc:* Darren Martyn d.martyn.fulldisclos...@gmail.com; Antony
 widmal antony.wid...@gmail.com; Martin Allert all...@arago.de;
 full-disclosure@lists.grok.org.uk full-disclosure@lists.grok.org.uk;
 phocean 0...@phocean.net; Nikolay Kichukov hijac...@oldum.net;
 valdis.kletni...@vt.edu valdis.kletni...@vt.edu
 *Sent:* Tuesday, November 22, 2011 1:51 PM
 *Subject:* Re: [Full-disclosure] NEVER AGAIN

 Consultancy. Hehe.

 You seriously need treatment for schizophrenia. Why don't you go and
 argue with your alter ego?

 Please tell your solicitor he is welcome to talk to mine any day.

 Regards,



 JR

 On 22 November 2011 13:48, andrew.wallace 
 andrew.wall...@rocketmail.comwrote:

 I think you are mistaken, this email is not sent by my consultancy.

 I ask you to retract your statement or face legal action.

 ---

 Andrew Wallace

 Independent consultant

 https://plus.google.com/115085501867247270932/about




 --
 On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into
 the machine wrong figures, will the right answers come out?' I am not able
 rightly to apprehend the kind of confusion of ideas that could provoke such
 a question.

 ** IMPORTANT INFORMATION/DISCLAIMER *

 This document should be read only by those persons to whom it is
 addressed. If you have received this message it was obviously addressed to
 you and therefore you can read it, even it we didn't mean to send it to
 you. However, if the contents of this email make no sense whatsoever then
 you probably were not the intended recipient, or, alternatively, you are a
 mindless cretin; either way, you should immediately kill yourself and
 destroy your computer (not necessarily in that order). Once you have taken
 this action, please contact us.. no, sorry, you can't use your computer,
 because you just destroyed it, and possibly also committed suicide
 afterwards, but I am starting to digress.. *
 * The originator of this email is not liable for the transmission of the
 information contained in this communication. Or are they? Either way it's a
 pretty dull legal query and frankly one I'm not going to dwell on. But
 should you have nothing better to do, please feel free to ruminate on it,
 and please pass on any concrete conclusions should you find them. However,
 if you pass them on via email, be sure to include a disclaimer regarding
 liability for transmission.
 *
 * In the event that the originator did not send this email to you, then
 please return it to us and attach a scanned-in picture of your mother's
 brother's wife wearing nothing but a kangaroo suit, and we will immediately
 refund you exactly half of what you paid for the can of Whiskas you bought
 when you went to Pets** ** At Home yesterday. *
 * We take no responsibility for non-receipt of this email because we are
 running Exchange 5.5 and everyone knows how glitchy that can be. In the
 event that you do get this message then please note that we take no
 responsibility for that either. Nor will we accept any liability, tacit or
 implied, for any damage you may or may not incur as a result of receiving,
 or not, as the case may be, from time to time, notwithstanding all
 liabilities implied or otherwise, ummm, hell, where was I...umm, no matter
 what happens, it is NOT, and NEVER WILL BE, OUR FAULT! *
 * The comments and opinions expressed herein are my own and NOT those of
 my employer, who, if he knew I was sending emails and surfing the seamier
 side of the Internet, would cut off my manhood and feed it to me for
 afternoon tea. *







 --
 On two occasions...I have

Re: [Full-disclosure] Joomla Component (com_content) - Blind SQL Injection Vulnerability

2011-11-11 Thread Christian Sciberras

Which version is this?



On Sat, Nov 12, 2011 at 12:35 AM, resea...@vulnerability-lab.com 
resea...@vulnerability-lab.com wrote:

 Title:
 ==
 Joomla Component (com_content) -  Blind SQL Injection Vulnerability


 Date:
 =
 2011-11-11


 References:
 ===
 http://www.vulnerability-lab.com/get_content.php?id=323


 VL-ID:
 =
 323


 Introduction:
 =
 Joomla is a free and open source content management system (CMS) for
 publishing content on
 the World Wide Web and intranets and a model–view–controller (MVC) Web
 application framework
 that can also be used independently.
 Joomla is written in PHP, uses object-oriented programming (OOP)
 techniques and software design
 patterns[citation needed], stores data in a MySQL database, and includes
 features such as page
 caching, RSS feeds, printable versions of pages, news flashes, blogs,
 polls, search, and support
 for language internationalization.
 Joomla had been downloaded 23 million times. Between March 2007 and
 February 2011 there had been
 more than 21 million downloads. There are over 7,400 free and commercial
 extensions available
 from the official Joomla! Extension Directory and more available from
 other sources

 (Copy of the Vendor Website: http://en.wikipedia.org/wiki/Joomla!)


 Abstract:
 =
 A vulnerability laboratory researcher discovered a Blind SQL Injection
 vulnerability on the com_content component of the joomla CMS.


 Status:
 
 Published


 Exploitation-Technique:
 ===
 Remote


 Severity:
 =
 Critical


 Details:
 
 A blind SQL Injection vulnerability was detected on the com_content
 component of the joomla CMS.
 The vulnerability allows an attacker (remote) to inject/execute own sql
 statements on the affected application dbms.
 Successful exploitation of the vulnerability can result in compromise of
 the affected application dbms.

 Vulnerable Module(s):
  [+] com_content


 Proof of Concept:
 =
 The vulnerability can be exploited be remote attackers. For demonstration
 or reproduce ...

 1: [Site]/joomla/index.php?option=com_contentview=archiveyear=1 [BSQLI]

 2: [Site]/joomla/index.php?option=com_contentview=archiveyear=-1 or 1=1--

 3: [Site]/joomla/index.php?option=com_contentview=archiveyear=-1 or 1=0--


 [x] Demo :

 http://www.paul.house.gov/index.php?option=com_contentview=archiveyear=-1or 
 1=0--


 Risk:
 =
 The security risk of the blind sql injection vulnerability is estimated as
 critical.


 Credits:
 
 E.Shahmohamadi  (IRAN)


 Disclaimer:
 ===
 The information provided in this advisory is provided as it is without any
 warranty. Vulnerability-Lab disclaims all warranties,
 either expressed or implied, including the warranties of merchantability
 and capability for a particular purpose. Vulnerability-
 Lab or its suppliers are not liable in any case of damage, including
 direct, indirect, incidental, consequential loss of business
 profits or special damages, even if Vulnerability-Lab or its suppliers
 have been advised of the possibility of such damages. Some
 states do not allow the exclusion or limitation of liability for
 consequential or incidental damages so the foregoing limitation
 may not apply. Any modified copy or reproduction, including partially
 usages, of this file requires authorization from Vulnerability-
 Lab. Permission to electronically redistribute this alert in its
 unmodified form is granted. All other rights, including the use of
 other media, are reserved by Vulnerability-Lab or its suppliers.

Copyright ©
 2011|Vulnerability-Lab

 --
 Website: www.vulnerability-lab.com ; vuln-lab.com or vuln-db.com
 Contact: ad...@vulnerability-lab.com or supp...@vulnerability-lab.com


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [foofus-tools] discontinued?

2011-10-27 Thread Christian Sciberras

Sounds like someone can't get enough flamewar. /eot












On Thu, Oct 27, 2011 at 4:20 PM, GloW - XD doo...@gmail.com wrote:

 naw we fuckin hate windows it sucks.


 On 27 October 2011 19:20, Kristen Eisenberg kristen.eisenb...@yahoo.com
 wrote:
  Hi guys, well first of all thanx for building a tool like fgdump :)
  but i'm worried, since 2k8 there is no update and it would be very sad
  if it's discontinued... are you planning another release?
  Kristen Eisenberg
  Billige Flüge
  Marketing GmbH
  Emanuelstr. 3,
  10317 Berlin
  Deutschland
  Telefon: +49 (33)
  5310967
  Email:
  utebachmeier at
  gmail.com
  Site:
  http://flug.airego.de - Billige Flüge vergleichen
  ___
  foofus-tools mailing list
  foofus-to...@lists.foofus.net
  http://lists.foofus.net/listinfo.cgi/foofus-tools-foofus.net
 
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Meet the Guy Who Snitched on Occupy Wall Street to the FBI and NYPD

2011-10-16 Thread Christian Sciberras

Funny, Anonymous' tagline seems to be either with us, or you're corrupt.
Happens that everyone I know well wouldn't touch Anonymous with a barge
pole.
I may arguably be naive, but I'm certainly not corrupt. So it seems they're
yet another pawn...
Not that it's anything new, really.




On Mon, Oct 17, 2011 at 1:07 AM, Ryan Dewhurst ryandewhu...@gmail.comwrote:

 http://www.linkedin.com/in/tommyryan


 On Mon, Oct 17, 2011 at 12:05 AM, Jeffrey Walton noloa...@gmail.com
 wrote:
  On Sun, Oct 16, 2011 at 6:56 PM, Ivan . ivan...@gmail.com wrote:
 
 http://gawker.com/5850054/meet-the-guy-who-snitched-on-occupy-wall-street-to-the-fbi-and-nypd
 
  Thomas Ryan is definitely not the brightest fellow in computer security:
 
 We have been heavily monitoring Occupy Wall Street,
 and Anonymous.
 
  Aaron Barr did similar, ruined the company he worked for (HBGary
  Federal) and lost his job in the process.
 
  Jeff
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [Full-flame-war] There used to be a security mailing list at this address.

2011-10-15 Thread Christian Sciberras

Guess it all depends on who's topposting...

On Sat, Oct 15, 2011 at 6:27 AM, dave bl db.pub.m...@gmail.com wrote:

 On 15 October 2011 14:11, Thor (Hammer of God) t...@hammerofgod.com
 wrote:
  Haven't we made it to the point where top posting is OK?  I mean, it
 works from a Ped Xing standpoint, why not here?  It is REALLY that bad?

 I thought this was a security mailing list not an exercise in how not
 to do it TM. Also, top-posting really isn't that big of a deal.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

Yes, since humanity is a great success in a fragmented form. Not.

Then again, there are those that believe the end of the world will come when
man stops fighting with each other, so I suppose even culture and tradition
are against me on this one.

Fair enough, I don't quite care about the damage some are inflicting to
themselves. Which brings us back to the 99% discussion; some seem they're
doing some form of good by making us redact a few steps in the course of
progress.





On Fri, Oct 14, 2011 at 1:26 PM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 ...And what, exactly, gave the US the right to be there in the first place?
 Non existant WMD? Human rights? The US has to stop seeing themselves as
 international police.

 /ends miniature rant


 On Fri, Oct 14, 2011 at 7:28 AM, Mike Hale eyeronic.des...@gmail.comwrote:

 Obviously not.

 Again.  They looked like they had weapons.  The pilots weren't
 wondering...they were sure they saw weapons.

 They then engaged what appeared to be a clear threat to other US
 forces nearby.

 The pilots acted exactly as they should have, given the information
 presented to them.  This was a war zone, not a country club.

 On Thu, Oct 13, 2011 at 11:23 PM, Jeffrey Walton noloa...@gmail.com
 wrote:
  On Fri, Oct 14, 2011 at 2:19 AM, Mike Hale eyeronic.des...@gmail.com
 wrote:
  Except that they weren't obviously unarmed.
 
  Not only where they not obviously unarmed, they appeared to be armed.
 
  Look at the 4 minute mark.
 
  That sure as shit looks like an RPG.
 
  The crew thought the group was armed.  Ergo, they were cleared to
 engage.
 
  This wasn't a war crime...and the allegation that it was just makes
  people look ridiculous.
  Listen to yourself: we weren't sure if they were armed, so we killed
  them. Put yourself and your family in the shoes of the dead folks. Its
  not a comfortable place to be, is it?
 
  Jeff
 
  On Thu, Oct 13, 2011 at 11:05 PM,  valdis.kletni...@vt.edu wrote:
  On Thu, 13 Oct 2011 22:44:44 PDT, Mike Hale said:
  Seriously!  Think about the injustice of having American helicopters
  engage armed individuals shadowing American soldiers.
 
  Shooting at armed individuals is one thing.  If it's civilians and
 Reuters
  employees who *aren't* obviously armed, it's something else.
 
 
 
 
 
  --
  09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
 
 



 --
 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

Resorting to personal attacks? Nice.

Technical skills in what? Running a wordpress blog? Defacing a website?
Growing pot?

I rarely publicise any materials, most of the time I just tell whoever is
responsible to do a fix.
I'm not really running after publicity, unlike you guys.
Also note that I never said I'm a seasoned hacker... in fact, my occupation
is quite on the opposite side of the spectrum...

You also seem to know more than I do what the Ubuntu VM I have contains.

But that must make all the difference! I mean, people that don't know qubits
from bits shouldn't be allowed in such discussions
(of course there's wikipedia...)




On Fri, Oct 14, 2011 at 6:38 PM, Georgi Guninski gunin...@guninski.comwrote:

 Christian Sciberras,

 I have trouble judging your technical skills - all I have seen is bad
 smalltalk.

 Do you have any technical publications you can share so I can judge?

 btw, the best i found was you could could reproduce a bug in a CMS and in
 addition you can't tell root from user password on vanilla ubuntu.

 --
 joro

 On Fri, Oct 14, 2011 at 02:11:13AM +0200, Christian Sciberras wrote:
   So if they cause damage for profit that makes it ok?
 
  No. But it's certainly better than doing damage without profit. Making
  profit means that at the end of the day, the money's going to go
 somewhere
  further in the chain.
  Flattening a tower, for instance, or attacking the local bank that
 refused
  to give you a loan because of the time you spent in a cell, isn't as
  productive.
  Neither is it making a company loose clients/profit just because they
  decided they don't want you to use their services (as if you did have a
  right in the first place...).
 
   And yes I acknowledge the American public has a measure of
 responsibility
  in the situation too, human beings are by nature imperfect, but the
 largest
  share of responsibility lies with the names listed below.
 
  The largest share? I can see Ex-president Bush trying to sell you a
 bottle
  of beer for $10 dollars ($7 profit). Wait, I can't.
 
   That sort of thing has happened to me and I paid back every dime of it,
  most people are decent human beings and would do the same.
 
  Most people? I could have sworn 90% of the people in the NYC subway would
  thank $deity if you suddenly dropped dead so they could get things off
 you.
  Call me cynical, but I wouldn't trust anyone else in such cases, other
 than
  myself.
 
 
  Regarding that list of yours, great! Now we just need a little more
 effort.
  For each of those persons, please enlighten us as to what they did
 legally
  wrong.
  Of course, the people that landed in jail shouldn't be counted. The 99%
  protest is a modern one committed to change, it just can't right wrongs
 by
  pointing at jailed people.
 
 
 
 
  On Thu, Oct 13, 2011 at 11:35 PM, Laurelai laure...@oneechan.org
 wrote:
 
On 10/13/2011 9:18 AM, Christian Sciberras wrote:
  
   I simply acknowledge the fact that some people work hard to get
 obscenely
   rich, but I just can't stand people that cause damage for the fun of
 it.
  
So if they cause damage for profit that makes it ok?
  
Yes, I stick for everyone that minds his business, instead of ruining
   others' for the fun of it.
  
What bothers me is the fact that those hypocrites (protesters) are
 crying
   out loud against some people they're highly envious of with the excuse
 of
   the depression.
   Well, here's the news; the famous depression has been brought about by
   these same people!
  
  
   And yes I acknowledge the American public has a measure of
 responsibility
   in the situation too, human beings are by nature imperfect, but the
 largest
   share of responsibility lies with the names listed below.
  
  
  
  
If someone above is collecting free money because of incentives for
   people to spend money (and which seem to work well), I can't blame him.
  
Yes because trickle down theory worked *so* well
  
How many times in your life have you paid back something you received
 by
   mistake and which wasn't yours?
   While I would foremost applaud anyone that would right such a wrong, I
 just
   can't ignore the fact that those people out there representing the
 99% are
   big-time hypocrites.
  
   That sort of thing has happened to me and I paid back every dime of it,
   most people are decent human beings and would do the same.
  
  
On a different argument, since you seem to know well enough how some
 of
   the 1% are doing immoral things, why don't you start by handing out
 names
   instead of talking air just as the 99% crowd has been doing up till
 now?
  
   *Alan Greenspan, chairman of US Federal Reserve 1987- 2006
   **Mervyn King, governor of the Bank of England
   **Bill Clinton, former US president*
   *Gordon Brown, prime minister*
   *George W Bush, former US president*
   *Senator Phil Gramm
   **Abby Cohen, Goldman Sachs chief US strategist
   **Kathleen Corbet, former CEO, Standard  Poor's

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

Yeah, let's just all ignore low insults. The world would be a much better
place without them and whoever said them in the first place...








On Fri, Oct 14, 2011 at 11:02 PM, Laurelai laure...@oneechan.org wrote:

  On 10/14/2011 2:25 PM, Christian Sciberras wrote:

 Resorting to personal attacks? Nice.

  Technical skills in what? Running a wordpress blog? Defacing a website?
 Growing pot?

  I rarely publicise any materials, most of the time I just tell whoever is
 responsible to do a fix.
 I'm not really running after publicity, unlike you guys.
 Also note that I never said I'm a seasoned hacker... in fact, my occupation
 is quite on the opposite side of the spectrum...

  You also seem to know more than I do what the Ubuntu VM I have contains.

  But that must make all the difference! I mean, people that don't know
 qubits from bits shouldn't be allowed in such discussions
 (of course there's wikipedia...)




 On Fri, Oct 14, 2011 at 6:38 PM, Georgi Guninski gunin...@guninski.comwrote:

 Christian Sciberras,

 I have trouble judging your technical skills - all I have seen is bad
 smalltalk.

 Do you have any technical publications you can share so I can judge?

 btw, the best i found was you could could reproduce a bug in a CMS and in
 addition you can't tell root from user password on vanilla ubuntu.

 --
 joro

 On Fri, Oct 14, 2011 at 02:11:13AM +0200, Christian Sciberras wrote:
   So if they cause damage for profit that makes it ok?
 
  No. But it's certainly better than doing damage without profit. Making
  profit means that at the end of the day, the money's going to go
 somewhere
  further in the chain.
  Flattening a tower, for instance, or attacking the local bank that
 refused
  to give you a loan because of the time you spent in a cell, isn't as
  productive.
  Neither is it making a company loose clients/profit just because they
  decided they don't want you to use their services (as if you did have a
  right in the first place...).
 
   And yes I acknowledge the American public has a measure of
 responsibility
  in the situation too, human beings are by nature imperfect, but the
 largest
  share of responsibility lies with the names listed below.
 
  The largest share? I can see Ex-president Bush trying to sell you a
 bottle
  of beer for $10 dollars ($7 profit). Wait, I can't.
 
   That sort of thing has happened to me and I paid back every dime of
 it,
  most people are decent human beings and would do the same.
 
  Most people? I could have sworn 90% of the people in the NYC subway
 would
  thank $deity if you suddenly dropped dead so they could get things off
 you.
  Call me cynical, but I wouldn't trust anyone else in such cases, other
 than
  myself.
 
 
  Regarding that list of yours, great! Now we just need a little more
 effort.
  For each of those persons, please enlighten us as to what they did
 legally
  wrong.
  Of course, the people that landed in jail shouldn't be counted. The 99%
  protest is a modern one committed to change, it just can't right wrongs
 by
  pointing at jailed people.
 
 
 
 
  On Thu, Oct 13, 2011 at 11:35 PM, Laurelai laure...@oneechan.org
 wrote:
 
On 10/13/2011 9:18 AM, Christian Sciberras wrote:
  
   I simply acknowledge the fact that some people work hard to get
 obscenely
   rich, but I just can't stand people that cause damage for the fun of
 it.
  
So if they cause damage for profit that makes it ok?
  
Yes, I stick for everyone that minds his business, instead of ruining
   others' for the fun of it.
  
What bothers me is the fact that those hypocrites (protesters) are
 crying
   out loud against some people they're highly envious of with the excuse
 of
   the depression.
   Well, here's the news; the famous depression has been brought about by
   these same people!
  
  
   And yes I acknowledge the American public has a measure of
 responsibility
   in the situation too, human beings are by nature imperfect, but the
 largest
   share of responsibility lies with the names listed below.
  
  
  
  
If someone above is collecting free money because of incentives for
   people to spend money (and which seem to work well), I can't blame
 him.
  
Yes because trickle down theory worked *so* well
  
How many times in your life have you paid back something you received
 by
   mistake and which wasn't yours?
   While I would foremost applaud anyone that would right such a wrong, I
 just
   can't ignore the fact that those people out there representing the
 99% are
   big-time hypocrites.
  
   That sort of thing has happened to me and I paid back every dime of
 it,
   most people are decent human beings and would do the same.
  
  
On a different argument, since you seem to know well enough how some
 of
   the 1% are doing immoral things, why don't you start by handing out
 names
   instead of talking air just as the 99% crowd has been doing up till
 now?
  
*Alan Greenspan, chairman of US Federal Reserve 1987

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

You think I'm biting that?

Skinny and under-age  is just about everything you could come up with.
Congrats for creativity.

Just because two of you decided you found common grounds for insult doesn't
mean you're god-almighty-indisputably-right in every piece of shit you come
up with. Did I mention it's shit?

With that, I give you one, you have a point, I should have stopped
responding ever since some guy decided to equate a couple dozen of people
into America's 1%.

Strange, thought security guys would have been better with numbers...






On Sat, Oct 15, 2011 at 2:32 AM, Laurelai laure...@oneechan.org wrote:

  On 10/14/2011 6:32 PM, xD 0x41 wrote:

 Cristiano , per favor' mi dai dieci minuti scusa mi ma, e' essentiale ..
 You really dont realise how much, you attack others when they post,
 NOMATTER what the topic... yet you are still wondering why somany people
 seem to despise your skinny little nerdy ass... well, nerdy isnt bad, but,
 your a downright lookalike for mr.Bean aka rowan atkinson. You could maybe
 do his stunts, to ?
 Your the one who is usually abusing others, before the finality wich is
 simply adults not reesponding, to the baby whos crying out for more
 aarguements.
 You should stfu, and learn more, you assume to know all, in every post,
 your the brain, yet you are lame, i looked everything up abiout you, and
 yes, go ahead, and setup a nice wordpress secure setting, php wise to,  then
 yes, id maybe hink your atleast a halfwit ;)
 Anyhow, your basically a tr0ll, and, you seem to keep goading, even AFTER
 the others, have completely stopped responding to you, simply because,
 Laurelai was right, why would anyone want to keep up a thread wich has now
 turned malign, as i forsaw a week ago, but, i did not think it would even
 make a week, People like you, keep inspiring the flame to burn brighter..
 wich to me, is nastier than any *abuse* names, wich, you clearly have not
 counted howmany times you have actually called others, some form of rude
 name/word/personal attack.
 Maybe when you GROW UP, and behave as an adult, then I would assume the
 list will start to hear you, even through the bs.
 Anyhow, i applaud you, for *coming out* as to say, I mean, putting your pic
 up, like that, mate, you could be a pornstar! what you doin online
 :P~~~bahahaha
 go back to grade.2 then repeate it, then move on... then, if you work out
 how to call 911, call someone who gives a shit.
 Idiotic kid, grow the hell up.
 xd--

 // IND SEC CONSILTANT FOR Yep yep Security (simply coz it sounds good) YEP
 YEP for all your Hat attire needs!

 On 15 October 2011 08:57, Christian Sciberras uuf6...@gmail.com wrote:

 Yeah, let's just all ignore low insults. The world would be a much better
 place without them and whoever said them in the first place...








 On Fri, Oct 14, 2011 at 11:02 PM, Laurelai laure...@oneechan.org wrote:

   On 10/14/2011 2:25 PM, Christian Sciberras wrote:

 Resorting to personal attacks? Nice.

  Technical skills in what? Running a wordpress blog? Defacing a website?
 Growing pot?

  I rarely publicise any materials, most of the time I just tell whoever
 is responsible to do a fix.
 I'm not really running after publicity, unlike you guys.
 Also note that I never said I'm a seasoned hacker... in fact, my
 occupation is quite on the opposite side of the spectrum...

  You also seem to know more than I do what the Ubuntu VM I have
 contains.

  But that must make all the difference! I mean, people that don't know
 qubits from bits shouldn't be allowed in such discussions
 (of course there's wikipedia...)




 On Fri, Oct 14, 2011 at 6:38 PM, Georgi Guninski 
 gunin...@guninski.comwrote:

 Christian Sciberras,

 I have trouble judging your technical skills - all I have seen is bad
 smalltalk.

 Do you have any technical publications you can share so I can judge?

 btw, the best i found was you could could reproduce a bug in a CMS and
 in addition you can't tell root from user password on vanilla ubuntu.

 --
 joro

 On Fri, Oct 14, 2011 at 02:11:13AM +0200, Christian Sciberras wrote:
   So if they cause damage for profit that makes it ok?
 
  No. But it's certainly better than doing damage without profit. Making
  profit means that at the end of the day, the money's going to go
 somewhere
  further in the chain.
  Flattening a tower, for instance, or attacking the local bank that
 refused
  to give you a loan because of the time you spent in a cell, isn't as
  productive.
  Neither is it making a company loose clients/profit just because they
  decided they don't want you to use their services (as if you did have
 a
  right in the first place...).
 
   And yes I acknowledge the American public has a measure of
 responsibility
  in the situation too, human beings are by nature imperfect, but the
 largest
  share of responsibility lies with the names listed below.
 
  The largest share? I can see Ex-president Bush trying to sell you a
 bottle
  of beer for $10 dollars ($7 profit

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

So, if in practice the 99% enjoy privileges a notch less than the 1%, where
did the 99% go to?






On Wed, Oct 12, 2011 at 7:52 PM, Thor (Hammer of God)
t...@hammerofgod.comwrote:

 I know that if I was starving to death and couldn't afford medical care for
 my children that I wouldn't be sitting around with a $500 camera editing my
 photos with $700 software on a $1000 computer.  Nor would I be sitting
 around in my apartment all day posting my woes on the Internet while the
 REAL 99% are having the tax dollars used to support these people taken out
 of their check.

  And you know there is no way to know if they bought the items second hand
  or if they were donated/gifted to them.
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

I simply acknowledge the fact that some people work hard to get obscenely
rich, but I just can't stand people that cause damage for the fun of it.

Yes, I stick for everyone that minds his business, instead of ruining
others' for the fun of it.

What bothers me is the fact that those hypocrites (protesters) are crying
out loud against some people they're highly envious of with the excuse of
the depression.
Well, here's the news; the famous depression has been brought about by these
same people!

If someone above is collecting free money because of incentives for people
to spend money (and which seem to work well), I can't blame him.

How many times in your life have you paid back something you received by
mistake and which wasn't yours?
While I would foremost applaud anyone that would right such a wrong, I just
can't ignore the fact that those people out there representing the 99% are
big-time hypocrites.

On a different argument, since you seem to know well enough how some of the
1% are doing immoral things, why don't you start by handing out names
instead of talking air just as the 99% crowd has been doing up till now?








On Thu, Oct 13, 2011 at 2:32 PM, Laurelai laure...@oneechan.org wrote:

  On 10/13/2011 1:29 AM, Christian Sciberras wrote:

 So, if in practice the 99% enjoy privileges a notch less than the 1%, where
 did the 99% go to?






  On Wed, Oct 12, 2011 at 7:52 PM, Thor (Hammer of God) 
 t...@hammerofgod.com wrote:

 I know that if I was starving to death and couldn't afford medical care
 for my children that I wouldn't be sitting around with a $500 camera editing
 my photos with $700 software on a $1000 computer.  Nor would I be sitting
 around in my apartment all day posting my woes on the Internet while the
 REAL 99% are having the tax dollars used to support these people taken out
 of their check.

  And you know there is no way to know if they bought the items second
 hand
  or if they were donated/gifted to them.
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


  I would say that the life we have is significantly less than the 1% and
 pretending otherwise is just silly, the 1% have a majority of the money and
 power and have manipulated the system to give them even more at the expense
 of the 99%, its gotten to the point where those in power are blatantly doing
 illegal and immoral things because they know they can get away with this.
 They quite literally destroyed the economy for the 99% just to make
 themselves a profit *and* they won't be held accountable for it. I don't
 care if someone is wealthy or even obscenely rich, what *does* bother me is
 to knowingly cause so much damage to the global economy for their own
 personal gain, that is just *insane* you are the first to complain about the
 cost of damages that people like lulzsec/antisec do but you don't blink an
 eye at the people who quite literally destroyed the economy...in fact your
 sticking up for them.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Military: Computer Virus Wasn't Directed at Drones

Here's another lesson *you* should learn; read what others say twice if you
can't understand it the first time.

I don't remember the focus of the discussion was on the malware per se, but
more about questioning competence behind the responsible people.






On Thu, Oct 13, 2011 at 11:02 PM, andrew.wallace 
andrew.wall...@rocketmail.com wrote:

 The computer virus that hit the Pentagon's drone program last month was
 not directed at the military systems but was common malware used to steal
 log-ins and passwords used in online gaming, military officials said
 Wednesday.


 http://abcnews.go.com/Technology/wireStory/military-computer-virus-directed-drones-14725058

 Lesson to learn, stop reading Wired magazine web site.

 ---

 Andrew Wallace

 Independent consultant

 www.n3td3v.org.uk



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

So if they cause damage for profit that makes it ok?

No. But it's certainly better than doing damage without profit. Making
profit means that at the end of the day, the money's going to go somewhere
further in the chain.
Flattening a tower, for instance, or attacking the local bank that refused
to give you a loan because of the time you spent in a cell, isn't as
productive.
Neither is it making a company loose clients/profit just because they
decided they don't want you to use their services (as if you did have a
right in the first place...).

And yes I acknowledge the American public has a measure of responsibility
in the situation too, human beings are by nature imperfect, but the largest
share of responsibility lies with the names listed below.

The largest share? I can see Ex-president Bush trying to sell you a bottle
of beer for $10 dollars ($7 profit). Wait, I can't.

That sort of thing has happened to me and I paid back every dime of it,
most people are decent human beings and would do the same.

Most people? I could have sworn 90% of the people in the NYC subway would
thank $deity if you suddenly dropped dead so they could get things off you.
Call me cynical, but I wouldn't trust anyone else in such cases, other than
myself.

Regarding that list of yours, great! Now we just need a little more effort.
For each of those persons, please enlighten us as to what they did legally
wrong.
Of course, the people that landed in jail shouldn't be counted. The 99%
protest is a modern one committed to change, it just can't right wrongs by
pointing at jailed people.

On Thu, Oct 13, 2011 at 11:35 PM, Laurelai laure...@oneechan.org wrote:

On 10/13/2011 9:18 AM, Christian Sciberras wrote:

I simply acknowledge the fact that some people work hard to get obscenely
rich, but I just can't stand people that cause damage for the fun of it.

So if they cause damage for profit that makes it ok?

Yes, I stick for everyone that minds his business, instead of ruining
others' for the fun of it.

What bothers me is the fact that those hypocrites (protesters) are crying
out loud against some people they're highly envious of with the excuse of
the depression.
Well, here's the news; the famous depression has been brought about by
these same people!

If someone above is collecting free money because of incentives for
people to spend money (and which seem to work well), I can't blame him.

Yes because trickle down theory worked *so* well

How many times in your life have you paid back something you received by
mistake and which wasn't yours?
While I would foremost applaud anyone that would right such a wrong, I just
can't ignore the fact that those people out there representing the 99% are
big-time hypocrites.

That sort of thing has happened to me and I paid back every dime of it,
most people are decent human beings and would do the same.

On a different argument, since you seem to know well enough how some of
the 1% are doing immoral things, why don't you start by handing out names
instead of talking air just as the 99% crowd has been doing up till now?

*Alan Greenspan, chairman of US Federal Reserve 1987- 2006
**Mervyn King, governor of the Bank of England
**Bill Clinton, former US president*
*Gordon Brown, prime minister*
*George W Bush, former US president*
*Senator Phil Gramm
**Abby Cohen, Goldman Sachs chief US strategist
**Kathleen Corbet, former CEO, Standard Poor's
**Hank Greenberg, AIG insurance group
**Andy Hornby, former HBOS boss
**Steve Crawshaw, former BB boss
**Adam Applegarth, former Northern Rock boss
**Dick Fuld, Lehman Brothers chief executive
**Ralph Cioffi and Matthew Tannin
**Lewis Ranieri
**Joseph Cassano, AIG Financial Products
**Chuck Prince, former Citi boss
**Angelo Mozilo, Countrywide Financial
**Stan O'Neal, former boss of Merrill Lynch*
*Jimmy Cayne, former Bear Stearns boss
**Christopher Dodd, chairman, Senate banking committee (Democrat)
**Geir Haarde, Icelandic prime minister
**John Tiner, FSA chief executive, 2003-07*

Oh yeah and lets not forget about this guy
http://www.time.com/time/specials/packages/article/0,28804,1877351_1877350_1877337,00.html
And while he is thankfully spending time in a prison cell, so many other
names on this list go free, in fact a good chunk of them made a profit off
of the disaster.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

Darren's and indeed many other people's lame excuse is that they're too
humble to be greedy. As if!
If anything, most people are greedier than that 1%. The only difference is
that people are bad at it, unlike that 1%.

Just consider the fact that Average Joe would be just too happy to evade
tax.
Richer Joe, instead, might be doing the same with his $1bn business.
In both cases, they're breaking the law.

The occupy wallstreet movement is simply hypocrisy.

Did I happen to mention that I'm far from rich? In the coming years, I'll be
struggling to get my own drop of land.
The only unfair part I see is people complaining while buying iPads and
iCrap over Facebook, Twitter etc..


On Tue, Oct 11, 2011 at 6:07 PM, Jeffrey Walton noloa...@gmail.com wrote:

 On Tue, Oct 11, 2011 at 9:25 AM, Darren Martyn
 d.martyn.fulldisclos...@gmail.com wrote:
  Chris - Empathy, guilt, and morals. Guilt being a major factor. The
  possibility was always there to make millions via evil means, but morals
 and
  knowing it would be hard to live with.
 
  The problem is not getting lots of money. That is the easy part. The
 issue
  is with living with yourself afterward.
 How about illegal? Check out the Hobbs Act [1]. I'm not making this
 crap up - the US has laws on the books for negatively affecting
 commerce (which the crash did), and using fear to peddle their warez
 (how financial institutions market their instruments). There's
 probably provisions in the PATRIOT Act, too.

 The last tine I checked (about a year ago), the SEC had opened fewer
 than 100 civil investigations. No criminal investigations, despite the
 fact that some of the financial institutions created spurious ratings
 companies just to rate their instruments 'good'.

 Jeff

 [1]
 http://www.justice.gov/usao/eousa/foia_reading_room/usam/title9/131mcrm.htm

  On Tue, Oct 11, 2011 at 12:43 AM, Bob Dobbs bobd10...@gmail.com wrote:
 
  On Mon, Oct 10, 2011 at 10:57 AM, Jeffrey Walton noloa...@gmail.com
  wrote:
 
  Who are the real threats to the US: terrorist who try to dream up ways
  to do the US harm, or Corporate and Congress which does the US harm?
 
  I hate to contribute to an off-topic thread but you've successfully
  trolled me here: Congress has done FAR more harm to the US than
 terrorists
  over the last 10 years by just about every measure.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

Regarding who's doing the most damage to US economy, I'll just say I won't
comment.

I take issue with the 1%/99% idea; ie, the excuse that some people deserve
more just because they are allowed to lie - even if it makes them
hypocrites.



On Wed, Oct 12, 2011 at 9:40 AM, Jeffrey Walton noloa...@gmail.com wrote:

 On Wed, Oct 12, 2011 at 2:51 AM, Christian Sciberras uuf6...@gmail.com
 wrote:
  Darren's and indeed many other people's lame excuse is that they're too
  humble to be greedy. As if!
 Its not about greed - pursuit of wealth is fine. You just can't harm
 others while doing it. (Well, apparently you can in the US).

 One of the funniest things I ever read regarding Bin Laden's little
 war was a boycott of the US dollar to reduce reliance [on the dollar]
 and to harm the US economy [1].

 Thought experiment: terrorist wanted to ruin the US economy. US
 Financial institutions threw the US (and world) economy into a
 recession (again). The US financial institutions responsible must be
 terrorist organizations.

 Thank {insert higher being here} that Bin Laden did not make a PAC
 contribution on 9/10.

 Jeff

 [1] http://www.nytimes.com/2010/01/30/world/middleeast/30binladen.html


  On Tue, Oct 11, 2011 at 6:07 PM, Jeffrey Walton noloa...@gmail.com
 wrote:
 
  On Tue, Oct 11, 2011 at 9:25 AM, Darren Martyn
  d.martyn.fulldisclos...@gmail.com wrote:
   Chris - Empathy, guilt, and morals. Guilt being a major factor. The
   possibility was always there to make millions via evil means, but
 morals
   and
   knowing it would be hard to live with.
  
   The problem is not getting lots of money. That is the easy part. The
   issue
   is with living with yourself afterward.
  How about illegal? Check out the Hobbs Act [1]. I'm not making this
  crap up - the US has laws on the books for negatively affecting
  commerce (which the crash did), and using fear to peddle their warez
  (how financial institutions market their instruments). There's
  probably provisions in the PATRIOT Act, too.
 
  The last tine I checked (about a year ago), the SEC had opened fewer
  than 100 civil investigations. No criminal investigations, despite the
  fact that some of the financial institutions created spurious ratings
  companies just to rate their instruments 'good'.
 
  Jeff
 
  [1]
 
 http://www.justice.gov/usao/eousa/foia_reading_room/usam/title9/131mcrm.htm
 
  [SNIP]

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Search and Seizure of Email

Well said!



On Wed, Oct 12, 2011 at 5:16 PM, Daniel Sichel dani...@ponderosatel.comwrote:

 In fact, law enforcement officials don?t even need a search warrant to
 access private emails.

 In point of fact, nobody does, although acquiring this access is clearly
 easier for law enforcement.
 One of the burdens that the freedom the Internet brings, is the freedom.
 Your email is out there, typically unencrypted, available to anyone who
 can snatch the packets off the wire,
 Any ISP employee with appropriate read rights on a mail server.

 Take responsibility for your own email. Encrypt it if you must, but for
 heaven sakes, own the fact that it is publicly visible.

 If we do not take responsibility for our own email and whine about
 others reading it,  than there will HAVE to be regulations by government
 to protect us.
 That's what government does.  That's what it is SUPPOSED to do.  So
 before we invite Godzilla to protect our email, how about we just man up
 and take responsibility ourselves?

 But that's just the idea of a bunch of dead white guys like Edmund
 Burke, John Adams and James Madison, and what do they know?


 Dan Sichel

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Search and Seizure of Email

I think you meant there is no guarantee that email is encrypted.

You don't know if a provider is actually encrypting your mail unless you're
doing this yourself.

That's why there is no push.





On Wed, Oct 12, 2011 at 5:54 PM, Laurelai laure...@oneechan.org wrote:

  On 10/12/2011 10:33 AM, Christian Sciberras wrote:

 Well said!



 On Wed, Oct 12, 2011 at 5:16 PM, Daniel Sichel 
 dani...@ponderosatel.comwrote:

 In fact, law enforcement officials don?t even need a search warrant to
 access private emails.

 In point of fact, nobody does, although acquiring this access is clearly
 easier for law enforcement.
 One of the burdens that the freedom the Internet brings, is the freedom.
 Your email is out there, typically unencrypted, available to anyone who
 can snatch the packets off the wire,
 Any ISP employee with appropriate read rights on a mail server.

 Take responsibility for your own email. Encrypt it if you must, but for
 heaven sakes, own the fact that it is publicly visible.

 If we do not take responsibility for our own email and whine about
 others reading it,  than there will HAVE to be regulations by government
 to protect us.
 That's what government does.  That's what it is SUPPOSED to do.  So
 before we invite Godzilla to protect our email, how about we just man up
 and take responsibility ourselves?

 But that's just the idea of a bunch of dead white guys like Edmund
 Burke, John Adams and James Madison, and what do they know?


 Dan Sichel

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

  Well there is no push to make snail-mail encrypted and lets face it most
 peoples mailboxes don't have any sort of locking mechanisms and is available
 to anyone with two hands and the malicious intent to steal someones mail
 however the US Gov needs a warrant to intercept your physical mail, why does
 it being online somehow make it different? Especially considering the US
 Postal service keeps threatening to shut down, and this is due to the
 increased popularity of *email*. Why this should be troubling is that they
 consider email somehow different than physical mail when it comes to privacy
 rights for no really good reason, and considering that one of the grievances
 we had with England in the time of the revolutionary war was the government
 intercepting mail for arbitrary reasons. This should make every American
 citizen's hair stand on end.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Wipe off, rub out, reappear...

Uhm, how do you know?

As much as I think it unlikely, they might have actually analyzed the
executable and found it doesn't do that sort of thing.




On Tue, Oct 11, 2011 at 1:45 AM, Bob Dobbs bobd10...@gmail.com wrote:

 On Mon, Oct 10, 2011 at 4:31 PM, Michael Schmidt 
 mschm...@drugstore.comwrote:

  If its bot net code and it is behind an air barrier then it will never
 phone home. They


 It already broke the air wall to get in. It can certainly do so to get
 out.

 Bob

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Wipe off, rub out, reappear...

If you ask me, you sound like bragging on something you wrote.

Either that, or you're clueless to what you are saying.

Just because my younger brother won't understand 5 lines of code I wrote
doesn't make my 5 liner smart...
Applying the analogy here, just because they're possibly clueless to how OS
internals work doesn't mean the virus is doing anything particularly smart.








On Tue, Oct 11, 2011 at 1:55 AM, xD 0x41 sec...@gmail.com wrote:

 Is obvious, this is a very well made executable :)
 Or, set up well to spread and then hide, and doing so with even its phone
 home, wich is normal nowdays, for example consider an ircd, it uses
 PING/PONG, what if you change the rfc, and use ascii characters,then do this
 to the bot, remove USER mode completely only allow it for set modes/opers,
 and then try take the thing down, if it is connected thru about 40 different
 ips and does not rely on dynami dns...
 it is not impossible, it is happening now, and, it is also visible,
 however, these c7c centres are so advanced, Ids are just not getting enough
 info...you cannot do a thing on the properly modified control centres, and,
 i have seen that code, it is extremely modified version of ircd... it cannot
 be used by a NOn operator, and uses a totally different rfc to phopne home
 etc, thus making conventional methods used atm, useless... as they will
 loook for the strings that they know, and always ids will perform some
 string of commands, and, then slowly the operator sees the servers, and one
 by one he blocks YOU out of his network.
 This is a dog eat dog world, bot masters can be exceptionallt ingenious
 when it comes to these things, and masking an exe nowdays, is not as simple
 as some peoples SFX rar kits :)
 So even kits nowdays, can be way more advanced than 2008/2009 even...
 there has been a burst of tech, so there is also a burst in virus
 numbers... but, smart cc centres, you wont take down so easily, and they
 will move before you can even decrypt theyre settings... wich is exactly why
 stuxnet is non stoppable.. unless the owner shuuts it down, it wont  be
 killed..
 xd




 On 11 October 2011 10:45, Bob Dobbs bobd10...@gmail.com wrote:

 On Mon, Oct 10, 2011 at 4:31 PM, Michael Schmidt 
 mschm...@drugstore.comwrote:

  If its bot net code and it is behind an air barrier then it will never
 phone home. They


 It already broke the air wall to get in. It can certainly do so to get
 out.

 Bob



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Wipe off, rub out, reappear...

I already beat you up to it - you know nothing about their setup.
You don't know if their infection is the result of a botnet.

I don't deny you know anything about botnets, I'm just saying from the looks
of it you jumped to a load of conclusion without any proof whatsoever.




On Tue, Oct 11, 2011 at 12:11 PM, xD 0x41 sec...@gmail.com wrote:

 screwit, im a bite, i know my shit here..
 If i was not so smart, then i guess  i would not have a modified ircd wich
 is similar... wow i know.. just seems you dont know crap about cc botnets ,
 thats fo sure. I think i outlined a *good* setup, as i have seen it, or
 would not bothered to state the mods made.. is that simple. wwether it is
 hard t code or not, is not my business, nor i care for.. I just know, how
 they run, and, dont try bs me about what i do and dont know, because on this
 topic son, i have plenty of experience, and could easily match this with an
 AV spokesperson, and would not hesitate to, but what gains it to me ? None.
 I am here for those who give a crap, you sir, no nothing, atall, about even
 the controlling side of a good botnet wich, spreads fast.
 Most people, simply do not want you on them, then the better ones, simply
 hide as users on irc anyhow ;)
 Then again, i wouldnt know shit ey.
 gnite :-)
 have fun trying to pick apart anything with me in this area, i will enjoy
 tearing your anus out, word by word if i have to.
 xd


 On 11 October 2011 20:29, Christian Sciberras uuf6...@gmail.com wrote:

 If you ask me, you sound like bragging on something you wrote.

 Either that, or you're clueless to what you are saying.

 Just because my younger brother won't understand 5 lines of code I wrote
 doesn't make my 5 liner smart...
 Applying the analogy here, just because they're possibly clueless to how
 OS internals work doesn't mean the virus is doing anything particularly
 smart.








 On Tue, Oct 11, 2011 at 1:55 AM, xD 0x41 sec...@gmail.com wrote:

 Is obvious, this is a very well made executable :)
 Or, set up well to spread and then hide, and doing so with even its phone
 home, wich is normal nowdays, for example consider an ircd, it uses
 PING/PONG, what if you change the rfc, and use ascii characters,then do this
 to the bot, remove USER mode completely only allow it for set modes/opers,
 and then try take the thing down, if it is connected thru about 40 different
 ips and does not rely on dynami dns...
 it is not impossible, it is happening now, and, it is also visible,
 however, these c7c centres are so advanced, Ids are just not getting enough
 info...you cannot do a thing on the properly modified control centres, and,
 i have seen that code, it is extremely modified version of ircd... it cannot
 be used by a NOn operator, and uses a totally different rfc to phopne home
 etc, thus making conventional methods used atm, useless... as they will
 loook for the strings that they know, and always ids will perform some
 string of commands, and, then slowly the operator sees the servers, and one
 by one he blocks YOU out of his network.
 This is a dog eat dog world, bot masters can be exceptionallt ingenious
 when it comes to these things, and masking an exe nowdays, is not as simple
 as some peoples SFX rar kits :)
 So even kits nowdays, can be way more advanced than 2008/2009 even...
 there has been a burst of tech, so there is also a burst in virus
 numbers... but, smart cc centres, you wont take down so easily, and they
 will move before you can even decrypt theyre settings... wich is exactly why
 stuxnet is non stoppable.. unless the owner shuuts it down, it wont  be
 killed..
  xd




 On 11 October 2011 10:45, Bob Dobbs bobd10...@gmail.com wrote:

 On Mon, Oct 10, 2011 at 4:31 PM, Michael Schmidt 
 mschm...@drugstore.com wrote:

  If its bot net code and it is behind an air barrier then it will
 never phone home. They


 It already broke the air wall to get in. It can certainly do so to get
 out.

 Bob



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

I'm confident in knowing that many would agree to not to trust a single word
of what you're saying.

You might have touched the heart of many with the excuse of being poor, but
you won't sell the lie that you're not well off because of a pure heart to
anyone.







On Tue, Oct 11, 2011 at 3:25 PM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 Chris - Empathy, guilt, and morals. Guilt being a major factor. The
 possibility was always there to make millions via evil means, but morals and
 knowing it would be hard to live with.

 The problem is not getting lots of money. That is the easy part. The issue
 is with living with yourself afterward.

 On Tue, Oct 11, 2011 at 12:43 AM, Bob Dobbs bobd10...@gmail.com wrote:

 On Mon, Oct 10, 2011 at 10:57 AM, Jeffrey Walton noloa...@gmail.comwrote:

 Who are the real threats to the US: terrorist who try to dream up ways
 to do the US harm, or Corporate and Congress which does the US harm?


 I hate to contribute to an off-topic thread but you've successfully
 trolled me here: Congress has done FAR more harm to the US than terrorists
 over the last 10 years by just about every measure.

 Bob

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

He who believes the 99% are not guilty of greed is a downright fool.

The 1%? I don't care. Honestly, I don't.

Fun quote (from the 99% crowd): Why does the 1% deserve a Ferrari and I
don't?!





On Mon, Oct 10, 2011 at 10:43 AM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 The day may come when Wall Street is finally silent, the slowly rotting
 carcasses of the power hungry elites swinging silently from the trees in
 Central park, the lynch mob finally satiated... But will anything change?

 Greed will always exist, there will always be those who think they can get
 away with this kind of thing.
 Funny how it finally has the President interested, maybe we can have change
 now?


 On Thu, Oct 6, 2011 at 7:54 PM, Jeffrey Walton noloa...@gmail.com wrote:

 On Thu, Oct 6, 2011 at 1:21 PM, Georgi Guninski gunin...@guninski.com
 wrote:
  American people understand that not everybody's been
  following the rules, he said. These days, a lot of folks
  doing the right thing are not rewarded. A lot of folks who
  are not doing the right thing are rewarded.
 
 From the article:
: President Obama on Thursday called the Occupy Wall
: Street protests a reflection of a broad-based frustration
: about how our financial system works and pledged to
: continue fighting to protect American consumers.
 I seem to recall what Obama said at a banker's luncheon after he took
 office (to paraphrase): My administration is the only thing saving
 you from the pitchforks of the American people.

 It seems to me he took great pride in the protection he provided to
 the economic terrorists. I hope he chokes on the money the industry is
 stuffing in his pockets.

 Jeff

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

What's that got to do with everything?

You can't go force everyone to wear thorn jeans just because you feel
inferior when faced with a formal suit.

That, as well as the fact that the guy that got $1M in his bank account
rightly has what to brag about.

If you just can't get over it, get that iPhone and buy an app for your
problem (yes, there's an app for that!)  :)




On Mon, Oct 10, 2011 at 12:28 PM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 We all are guilty, that is true. I can admit to that. Though what I
 intensely dislike are those who think they are better than us - because they
 are more successful at being greedy pigs.


 On Mon, Oct 10, 2011 at 9:54 AM, Christian Sciberras uuf6...@gmail.comwrote:

 He who believes the 99% are not guilty of greed is a downright fool.

 The 1%? I don't care. Honestly, I don't.

 Fun quote (from the 99% crowd): Why does the 1% deserve a Ferrari and I
 don't?!





 On Mon, Oct 10, 2011 at 10:43 AM, Darren Martyn 
 d.martyn.fulldisclos...@gmail.com wrote:

 The day may come when Wall Street is finally silent, the slowly rotting
 carcasses of the power hungry elites swinging silently from the trees in
 Central park, the lynch mob finally satiated... But will anything change?

 Greed will always exist, there will always be those who think they can
 get away with this kind of thing.
 Funny how it finally has the President interested, maybe we can have
 change now?


 On Thu, Oct 6, 2011 at 7:54 PM, Jeffrey Walton noloa...@gmail.comwrote:

 On Thu, Oct 6, 2011 at 1:21 PM, Georgi Guninski gunin...@guninski.com
 wrote:
  American people understand that not everybody's been
  following the rules, he said. These days, a lot of folks
  doing the right thing are not rewarded. A lot of folks who
  are not doing the right thing are rewarded.
 
 From the article:
: President Obama on Thursday called the Occupy Wall
: Street protests a reflection of a broad-based frustration
: about how our financial system works and pledged to
: continue fighting to protect American consumers.
 I seem to recall what Obama said at a banker's luncheon after he took
 office (to paraphrase): My administration is the only thing saving
 you from the pitchforks of the American people.

 It seems to me he took great pride in the protection he provided to
 the economic terrorists. I hope he chokes on the money the industry is
 stuffing in his pockets.

 Jeff

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] “We keep wiping it off, and it keeps coming back”

http://www.wired.com/dangerroom/2011/10/virus-hits-drone-fleet/

This is news to me.

Moreover, I'm a bit confused as to how they don't track how it's coming
back.
I mean, how is it possible that no one stepped in and analyzed how the virus
acts and where it came from?

It sounds fish if you ask me.

Chris.
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

Yeah Darren, wish we all could get off like that $1M guy, screwing off
hardworking people while doing nothing.

That'd be the life.

Wonder what's stopping us all from doing it?







On Mon, Oct 10, 2011 at 3:41 PM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 iPhones... Why sir, surely you know a Nokia 3210 is far superior in
 conditions where it may be dropped?

 Sure, the guy with $1,000,000 can brag if he wants. Just if he has screwed
 over thousands of hardworking people to get that, and sees hisself as
 untouchable... Then he should suffer the consequences of his unsavory
 actions.


 On Mon, Oct 10, 2011 at 1:32 PM, Kain, Rebecca (.) bka...@ford.comwrote:

 Yes, why say anything that way???




 -Original Message-
 From: full-disclosure-boun...@lists.grok.org.uk
 [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of Thor
 (Hammer of God)
 Sent: Thursday, October 06, 2011 1:31 PM
 To: Georgi Guninski; full-disclosure@lists.grok.org.uk
 Subject: Re: [Full-disclosure] [OT] the nigger said: American people
 understand that not everybody's been following the rules

 No offense intended???  How you expect to refer to the President of the
 United States as a nigger and NOT offend people?   You crossed WAY
 over the line on that one, joro.   WAY over.

 t

  -Original Message-
  From: full-disclosure-boun...@lists.grok.org.uk
 [mailto:full-disclosure-
  boun...@lists.grok.org.uk] On Behalf Of Georgi Guninski
  Sent: Thursday, October 06, 2011 10:22 AM
  To: full-disclosure@lists.grok.org.uk
  Subject: [Full-disclosure] [OT] the nigger said: American people
 understand
  that not everybody's been following the rules
 
  risking n3td3v fate, sorry for offtopic.
 
  the nigger said [1] (no offense intended to black people):
 
  American people understand that not everybody's been following the
  rules, he said. These days, a lot of folks doing the right thing are
 not
  rewarded. A lot of folks who are not doing the right thing are
 rewarded.
 
  [1] http://www.cbsnews.com/8301-503544_162-20116707-503544.html
 
  --
  joro
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] “We keep wiping it off, and it keeps coming back”

I'm talking more about their engineers than their network.

If I had my network infected with a virus, I'd immediately deploy some form
of logging/monitoring tool (eg, wireshark).

Honestly, it all sounds like they're employing inexperienced engineers.
Which is again strange, considering the field they're in.

Regarding your bet, see that's already something. Why exactly can't they
verify your bet? It isn't like viruses suddenly became invisible, is it?

I'm just curious to these questions. It's strange to hear someone saying we
basically have no idea what's going on.



On Mon, Oct 10, 2011 at 3:40 PM, Michael T mt2410...@gmail.com wrote:

 It's a network that's 'detached', or 'segregated', or whatevered from the
 rest of the world, so it's 'largely immune to viruses'.  That likely means
 they have:
 1. NO logging
 2. NO anti-virus
 3. NO hardening

 The very fact that these systems are on a segregated network means they are
 probably more frail, and more susceptible to viruses, than a normal person's
 laptop.

 Immune to viruses...  What a crock of shit.  My bet is that it's coming
 from the planes.

 Mike

 On Mon, Oct 10, 2011 at 7:51 AM, Christian Sciberras uuf6...@gmail.comwrote:

 http://www.wired.com/dangerroom/2011/10/virus-hits-drone-fleet/

 This is news to me.

 Moreover, I'm a bit confused as to how they don't track how it's coming
 back.
 I mean, how is it possible that no one stepped in and analyzed how the
 virus acts and where it came from?

 It sounds fish if you ask me.

 Chris.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] “We keep wiping it off, and it keeps coming back”

Since it very much discredits and puts the AA to shame, isn't it quite
plausible that some department's lawyers fall over this guy's claims?


Maybe the article has been written specifically for people to draw the wrong
conclusion - happens too often - but still...






On Mon, Oct 10, 2011 at 7:36 PM, Thor (Hammer of God)
t...@hammerofgod.comwrote:

  Consider the source.  It’s “someone close” to the operations, and that
 only according to this guy.  It could very well be a slot-puller in the
 casino across the street…   I’m always dubious of the reporting of this type
 of thing where the source is some “secret” person, and where there is never
 any ability to refute claims.

 ** **

 t

 ** **

 *From:* full-disclosure-boun...@lists.grok.org.uk [mailto:
 full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Christian
 Sciberras
 *Sent:* Monday, October 10, 2011 7:05 AM
 *To:* Michael T
 *Cc:* full-disclosure@lists.grok.org.uk
 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

 ** **

 I'm talking more about their engineers than their network.

 ** **

 If I had my network infected with a virus, I'd immediately deploy some form
 of logging/monitoring tool (eg, wireshark).

 ** **

 Honestly, it all sounds like they're employing inexperienced engineers.
 Which is again strange, considering the field they're in.

 ** **

 Regarding your bet, see that's already something. Why exactly can't they
 verify your bet? It isn't like viruses suddenly became invisible, is it?**
 **

 ** **

 I'm just curious to these questions. It's strange to hear someone saying
 we basically have no idea what's going on.

 ** **

 ** **

 On Mon, Oct 10, 2011 at 3:40 PM, Michael T mt2410...@gmail.com wrote:***
 *

 It's a network that's 'detached', or 'segregated', or whatevered from the
 rest of the world, so it's 'largely immune to viruses'.  That likely means
 they have:
 1. NO logging
 2. NO anti-virus
 3. NO hardening

 The very fact that these systems are on a segregated network means they are
 probably more frail, and more susceptible to viruses, than a normal person's
 laptop.

 Immune to viruses...  What a crock of shit.  My bet is that it's coming
 from the planes.

 Mike

 On Mon, Oct 10, 2011 at 7:51 AM, Christian Sciberras uuf6...@gmail.com
 wrote:

   http://www.wired.com/dangerroom/2011/10/virus-hits-drone-fleet/

 ** **

 This is news to me.

 ** **

 Moreover, I'm a bit confused as to how they don't track how it's coming
 back.

 I mean, how is it possible that no one stepped in and analyzed how the
 virus acts and where it came from?

 ** **

 It sounds fish if you ask me.

 ** **

 Chris.

 ** **

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

  ** **

 ** **

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

That would make the joke of the year.



No, REALLY.







On Mon, Oct 10, 2011 at 6:08 PM, Dave m...@propergander.org.uk wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 10/10/2011 15:01, Christian Sciberras wrote:
  Yeah Darren, wish we all could get off like that $1M guy, screwing off
  hardworking people while doing nothing.
 
  That'd be the life.
 
  Wonder what's stopping us all from doing it?
 

 A social conscience? Empathy? Do unto others...?
 All three of the above?

 I know that's why I'm not rich.

 
 
  On Mon, Oct 10, 2011 at 3:41 PM, Darren Martyn 
  d.martyn.fulldisclos...@gmail.com wrote:
 
  iPhones... Why sir, surely you know a Nokia 3210 is far superior in
  conditions where it may be dropped?
 
  Sure, the guy with $1,000,000 can brag if he wants. Just if he has
 screwed
  over thousands of hardworking people to get that, and sees hisself as
  untouchable... Then he should suffer the consequences of his unsavory
  actions.
 
 
  On Mon, Oct 10, 2011 at 1:32 PM, Kain, Rebecca (.) bka...@ford.com
 wrote:
 
  Yes, why say anything that way???
 
 
 
 
  -Original Message-
  From: full-disclosure-boun...@lists.grok.org.uk
  [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of Thor
  (Hammer of God)
  Sent: Thursday, October 06, 2011 1:31 PM
  To: Georgi Guninski; full-disclosure@lists.grok.org.uk
  Subject: Re: [Full-disclosure] [OT] the nigger said: American people
  understand that not everybody's been following the rules
 
  No offense intended???  How you expect to refer to the President of the
  United States as a nigger and NOT offend people?   You crossed WAY
  over the line on that one, joro.   WAY over.
 
  t
 
  -Original Message-
  From: full-disclosure-boun...@lists.grok.org.uk
  [mailto:full-disclosure-
  boun...@lists.grok.org.uk] On Behalf Of Georgi Guninski
  Sent: Thursday, October 06, 2011 10:22 AM
  To: full-disclosure@lists.grok.org.uk
  Subject: [Full-disclosure] [OT] the nigger said: American people
  understand
  that not everybody's been following the rules
 
  risking n3td3v fate, sorry for offtopic.
 
  the nigger said [1] (no offense intended to black people):
 
  American people understand that not everybody's been following the
  rules, he said. These days, a lot of folks doing the right thing are
  not
  rewarded. A lot of folks who are not doing the right thing are
  rewarded.
 
  [1] http://www.cbsnews.com/8301-503544_162-20116707-503544.html
 
  --
  joro
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.2 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iQEVAwUBTpMYgbIvn8UFHWSmAQJW0ggAsnx4qDO0PEbf57DsUmg5Yqx4/Adr95ZD
 QqOEYDC2IuwEdypX6uwtk6PDY3/pIfO44ulqXEjoIpW1z5DRUmokB3/wGF1/LzOU
 xO9bABpy2JrewnTxe0pkZTUct2s6egME4D/t3RQ4gG05OYw4LvOq47lHn+Qkm6jP
 VOzbduAXL+fiUOyGlR487houK7FeRePagMlufLzDOVtr8xn1y0nKOdYMGSnsrFBM
 zf1aZRkwNibz9+5bc5i9JgSbqV6mOXE9icF1vsmcx/u8J8AxN0eWyPibV5MYg1wv
 lk9KB7RgUz5srBInubuCKR0wMV/s4+MPp81qa382G8qOY+jKKy9pUg==
 =miIQ
 -END PGP SIGNATURE-

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] “We keep wiping it off, and it keeps coming back”

Well, I know a local datacenter (can't be more than 10 years old) makes use
of a Faraday cage around it.
And it doesn't really keep any mission-critical equipment, so I guess others
out there do the same.

Depending on the type of cage/shielding (don't know about the local one) it
can completely block communications...






On Mon, Oct 10, 2011 at 10:17 PM, Michael Schmidt mschm...@drugstore.comwrote:

  I have no idea, I assume – this is usually what they mean when they talk
 about an “air barrier”

 ** **

 *From:* evejou [mailto:g...@techn0ev3.net]
 *Sent:* Monday, October 10, 2011 1:04 PM
 *To:* Michael Schmidt
 *Cc:* Thor (Hammer of God); Christian Sciberras; Michael T;
 full-disclosure@lists.grok.org.uk

 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

 ** **

 As someone kind of young (and thus no historical recollection), I'm kind of
 surprised that this is talked about in past-tense. Does this not happen
 anymore? I could see how this could get super annoying after awhile.

 ** **

 ** **

 On Mon, Oct 10, 2011 at 2:09 PM, Michael Schmidt mschm...@drugstore.com
 wrote:

 I know in the old days (15 years ago) – there were networks that were
 completely separate from the outside world. I remember trying to do
 telephone tech support to someone on a secure network…

  

 Tell him to do “this”

 He puts down the phone, goes through physical security, tries “this”

 He comes back though security picks up phone talks to me.

  

 Security allowed nothing that looked like portable storage in or out of the
 secure area.

  

 Rinse.

 Repeat.

  

 Couldn’t even place outside voice calls from the secure network area. I
 don’t know if they do this today. I also know that there used to be setups
 with removable hard drives where one drive connected you to the secure
 network and yet another drive connected to the unsecure network. – Two
 different network cards each enabled for different networks.

  

 The good old days

  

 *From:* full-disclosure-boun...@lists.grok.org.uk [mailto:
 full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Thor (Hammer of
 God)
 *Sent:* Monday, October 10, 2011 10:36 AM
 *To:* Christian Sciberras; Michael T


 *Cc:* full-disclosure@lists.grok.org.uk
 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

  

 Consider the source.  It’s “someone close” to the operations, and that only
 according to this guy.  It could very well be a slot-puller in the casino
 across the street…   I’m always dubious of the reporting of this type of
 thing where the source is some “secret” person, and where there is never any
 ability to refute claims.

  

 t

  

 *From:* full-disclosure-boun...@lists.grok.org.uk
 [mailto:full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Christian
 Sciberras
 *Sent:* Monday, October 10, 2011 7:05 AM
 *To:* Michael T
 *Cc:* full-disclosure@lists.grok.org.uk
 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

  

 I'm talking more about their engineers than their network.

  

 If I had my network infected with a virus, I'd immediately deploy some form
 of logging/monitoring tool (eg, wireshark).

  

 Honestly, it all sounds like they're employing inexperienced engineers.
 Which is again strange, considering the field they're in.

  

 Regarding your bet, see that's already something. Why exactly can't they
 verify your bet? It isn't like viruses suddenly became invisible, is it?**
 **

  

 I'm just curious to these questions. It's strange to hear someone saying
 we basically have no idea what's going on.

  

  

 On Mon, Oct 10, 2011 at 3:40 PM, Michael T mt2410...@gmail.com wrote:***
 *

 It's a network that's 'detached', or 'segregated', or whatevered from the
 rest of the world, so it's 'largely immune to viruses'.  That likely means
 they have:
 1. NO logging
 2. NO anti-virus
 3. NO hardening

 The very fact that these systems are on a segregated network means they are
 probably more frail, and more susceptible to viruses, than a normal person's
 laptop.

 Immune to viruses...  What a crock of shit.  My bet is that it's coming
 from the planes.

 Mike

 On Mon, Oct 10, 2011 at 7:51 AM, Christian Sciberras uuf6...@gmail.com
 wrote:

   http://www.wired.com/dangerroom/2011/10/virus-hits-drone-fleet/

  

 This is news to me.

  

 Moreover, I'm a bit confused as to how they don't track how it's coming
 back.

 I mean, how is it possible that no one stepped in and analyzed how the
 virus acts and where it came from?

  

 It sounds fish if you ask me.

  

 Chris.

  

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored

Re: [Full-disclosure] “We keep wiping it off, and it keeps coming back”

By the way, to reply to a certain n3td3v... locating anything does not
imply being clueless on what's going on, which seems to be their on-going
issue.

While at it, a reply to Thor, just to switch subjects for a bit; shield law
doesn't apply when a journalist/reporter falsifies information to get low
against the AA (in this case).

Since the judge and the prosecuted are one and the same (the AA), I think it
is a considerably dangerous situation to go against them.

That's the only notch of credibility I'm giving to the article. A response
from the AA could easily crush that trust.

Cheers,
Chris.


On Mon, Oct 10, 2011 at 10:24 PM, Christian Sciberras uuf6...@gmail.comwrote:

 Well, I know a local datacenter (can't be more than 10 years old) makes use
 of a Faraday cage around it.
 And it doesn't really keep any mission-critical equipment, so I guess
 others out there do the same.

 Depending on the type of cage/shielding (don't know about the local one) it
 can completely block communications...






 On Mon, Oct 10, 2011 at 10:17 PM, Michael Schmidt 
 mschm...@drugstore.comwrote:

  I have no idea, I assume – this is usually what they mean when they talk
 about an “air barrier”

 ** **

 *From:* evejou [mailto:g...@techn0ev3.net]
 *Sent:* Monday, October 10, 2011 1:04 PM
 *To:* Michael Schmidt
 *Cc:* Thor (Hammer of God); Christian Sciberras; Michael T;
 full-disclosure@lists.grok.org.uk

 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

 ** **

 As someone kind of young (and thus no historical recollection), I'm kind
 of surprised that this is talked about in past-tense. Does this not happen
 anymore? I could see how this could get super annoying after awhile.

 ** **

 ** **

 On Mon, Oct 10, 2011 at 2:09 PM, Michael Schmidt mschm...@drugstore.com
 wrote:

 I know in the old days (15 years ago) – there were networks that were
 completely separate from the outside world. I remember trying to do
 telephone tech support to someone on a secure network…

  

 Tell him to do “this”

 He puts down the phone, goes through physical security, tries “this”

 He comes back though security picks up phone talks to me.

  

 Security allowed nothing that looked like portable storage in or out of
 the secure area.

  

 Rinse.

 Repeat.

  

 Couldn’t even place outside voice calls from the secure network area. I
 don’t know if they do this today. I also know that there used to be setups
 with removable hard drives where one drive connected you to the secure
 network and yet another drive connected to the unsecure network. – Two
 different network cards each enabled for different networks.

  

 The good old days

  

 *From:* full-disclosure-boun...@lists.grok.org.uk [mailto:
 full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Thor (Hammer of
 God)
 *Sent:* Monday, October 10, 2011 10:36 AM
 *To:* Christian Sciberras; Michael T


 *Cc:* full-disclosure@lists.grok.org.uk
 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

  

 Consider the source.  It’s “someone close” to the operations, and that
 only according to this guy.  It could very well be a slot-puller in the
 casino across the street…   I’m always dubious of the reporting of this type
 of thing where the source is some “secret” person, and where there is never
 any ability to refute claims.

  

 t

  

 *From:* full-disclosure-boun...@lists.grok.org.uk
 [mailto:full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Christian
 Sciberras
 *Sent:* Monday, October 10, 2011 7:05 AM
 *To:* Michael T
 *Cc:* full-disclosure@lists.grok.org.uk
 *Subject:* Re: [Full-disclosure] “We keep wiping it off, and it keeps
 coming back”

  

 I'm talking more about their engineers than their network.

  

 If I had my network infected with a virus, I'd immediately deploy some
 form of logging/monitoring tool (eg, wireshark).

  

 Honestly, it all sounds like they're employing inexperienced engineers.
 Which is again strange, considering the field they're in.

  

 Regarding your bet, see that's already something. Why exactly can't they
 verify your bet? It isn't like viruses suddenly became invisible, is it?*
 ***

  

 I'm just curious to these questions. It's strange to hear someone saying
 we basically have no idea what's going on.

  

  

 On Mon, Oct 10, 2011 at 3:40 PM, Michael T mt2410...@gmail.com wrote:**
 **

 It's a network that's 'detached', or 'segregated', or whatevered from the
 rest of the world, so it's 'largely immune to viruses'.  That likely means
 they have:
 1. NO logging
 2. NO anti-virus
 3. NO hardening

 The very fact that these systems are on a segregated network means they
 are probably more frail, and more susceptible to viruses, than a normal
 person's laptop.

 Immune to viruses...  What a crock of shit.  My bet

Re: [Full-disclosure] Wipe off, rub out, reappear...

Well, it SHOULDN'T happen to people that are supposedly trained to overcome
such issues.

It's like engineers are inexperienced prior to a nuclear reactor meltdown.
While I wouldn't expect the engineers to have first-hand experience in
dealing with such issues, it still doesn't excuse them from know what
they're doing.





On Mon, Oct 10, 2011 at 10:22 PM, Daniel Sichel dani...@ponderosatel.comwrote:

 Somebody posted the following;

  I'm just curious to these questions. It's strange to hear someone
  saying we basically have no idea what's going on.
 

 Doesn't sound funny to me, happens to me all the time. That's how I
 learn.

 Dan S.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] New open source Security Framework

2011-10-06 Thread Christian Sciberras

I'd expect someone with the brain size of a pea would at least rename
variables in the code he claimed as his...
Someone with more sense would probably write such a 50-liner from scratch...





On Thu, Oct 6, 2011 at 4:01 PM, valdis.kletni...@vt.edu wrote:

 On Thu, 06 Oct 2011 00:34:00 -0300, root said:

  You don't have the faintest idea of how licencing works. You cannot slap
  a GPL v3 license to any software you see, much less erase the author's
  names. If you find a code in the internet without any license, you
  pretty much can't touch it, and must re-implement it completely.

 In particular, if code was written in a country that's a signatory to the
 Berne
 conventions, it's usually somewhere between very difficult and impossible
 to
 actually place a software work in the public domain - at least under US
 law,
 even putting an explicit This work is hereby placed in the public domain
 quite likely does *NOT* suffice - the only two clear ways to public domain
 in
 the US are expiration of the lifetime of the author plus 75 years
 copyright,
 and works for hire by a US federal government employee as part of his
 duties
 (so, for instance, NASA photographs are public domain - but photos of NASA
 activities taken by non-NASA photographers probably aren't).

 Also, smart programmers *don't* release their code into the public domain -
 that means that anybody can do anything with it. And that includes stealing
 it,
 using it to make tons of money, and then suing you if they discover a bug.
  The
 original reason for the BSD and X11 licenses was because you can't stick a
 hold harmless clause on something you public-domain.


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] OT Nigger - georgi+guninski+nigger+full-disclosure

2011-10-06 Thread Christian Sciberras

But you're certainly growing it. Retard.




On Thu, Oct 6, 2011 at 10:45 PM, xD 0x41 sec...@gmail.com wrote:

 umm.. idid not start this thread, nor many of the ones your actually
 replying to... have you even noticed this.
 fool.


 On 7 October 2011 07:04, Antony widmal antony.wid...@gmail.com wrote:

 Thing is, you bring shit, stupidity, troll on this mailing list. Most
 people here would agree.
 How about you start another shit/off-topic thread about Israel vs
 Palestinian this time ?
 Could be a fucking great topic on a IT sec mailing list.


 On Thu, Oct 6, 2011 at 3:53 PM, xD 0x41 sec...@gmail.com wrote:

 Oh, the brilliant one with nothing to offer... again.
 This list is getting worse, with or w/out me.. it only needs u and n3td3v
 and is perfect. yung.
 I make, i think, abit more than the avg McDonalds manager... so , you can
 dreamup your sick fantasies but, unfortunately the truth is truth.
 ciao bella.
 xd



 On 7 October 2011 06:44, Antony widmal antony.wid...@gmail.com wrote:

 Didn't know you could flip burgers and use your smartphone while working
 at Mc-Donald.


 On Thu, Oct 6, 2011 at 3:24 PM, xD 0x41 sec...@gmail.com wrote:

 “, the Indians were somewhat persecuted :)  “


 By that I take it you mean, systematic genocide? Where I grew up the
 school mascot (high school) was Benjamin Logan, an in(?)-famous Indian
 killer who not only murdered Indians, he wiped out entire villages
 massacring men, women and children in most of the villages in the area to
 eliminate the “native threat” for the white settlers.

 hehe i really dont know, and really, dont care... it is always some new
 and different views, so i just know from my school classes, indians were
 indeed hunted, and they also, fought back.. abit like aboriginals here..
 but, this guy i think was high on ice or sumthin before he even spoke to 
 me,
 he assumes i am now a racist :s
 I was saying, this country here in .au , is prolly the least one i
 could think of, as we have maybe 5 races alone in my street, maybe more, 
 how
 could you fight your neighbor... abit like some countries ;) (iran/iraq ,
 serbia/bosnia)...just gotup one day because told to, and took up arms,
 literally, against theyre neighbors... Thats happening now, and it is 
 still
 called genocide..
 That is life'... I aint young enough to join the army and make any
 difference.
 anyhow, i aint really into this race talk, and, dont want nothin todo
 with it, am no racist, simply not brought up to think badly of other
 people... this could happen, anywhere..
 cheers
 xd



 On 7 October 2011 06:19, Csirt, Star s...@delta.com wrote:

 ** ** **

 “, the Indians were somewhat persecuted :)  “

 ** **

 By that I take it you mean, systematic genocide? Where I grew up the
 school mascot (high school) was Benjamin Logan, an in(?)-famous Indian
 killer who not only murdered Indians, he wiped out entire villages
 massacring men, women and children in most of the villages in the area to
 eliminate the “native threat” for the white settlers.

 ** **

 ** **

 ** **
  --

 *From:* full-disclosure-boun...@lists.grok.org.uk [mailto:
 full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *xD 0x41
 *Sent:* Thursday, October 06, 2011 3:14 PM
 *To:* Sam Goody
 *Cc:* **full-disclosure@lists.grok.org.uk**
 *Subject:* Re: [Full-disclosure] OT Nigger -
 georgi+guninski+nigger+full-disclosure

 ** **

 Do you know any history about the racism
 that the native Indians have experienced?

 haha yes yes they would be named Aboriginals, in USA ,
 the Indians were somewhat persecuted :)

 get YOUR head out of YOUR arse idiot.
 xd


 

 On 7 October 2011 06:09, Sam Goody trashm...@hush.com wrote:

 You should really jump off a bridge. You always talk out of your
 ass including this one.

 How do you know there isn't racism in AU?

 How you ever been there? Do you know any history about the racism
 that the native Indians have experienced? Do you know about all
 other cultures that have had to endure racist laws in the AU?

 You have got no clue you piece of shit.

 Why don't you fucking get your head out of your ass. And what do
 you know about gangs? Are you now a gang expert? So gangs now
 inspire racism?

 Do you even know what racism means?

 You're a fucking failure you American piece of Shit.

 ** **



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/






 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VPN providers and any providers in general...

2011-10-04 Thread Christian Sciberras

In my eyes, a couple of offtopic messages is ok, but a train of several
messages in less than an hour is what spam is...
I must admit I was pissed off at that time, and the fact that some people
failed to deal with such discussions appropriately only made it worse.

Next time, launch your own thread for such discussions, so that people can
easily manage/ignore what they don't need, instead of filling up legitimate
threads with crap (imho).






On Tue, Oct 4, 2011 at 11:27 AM, Darren Martyn 
d.martyn.fulldisclos...@gmail.com wrote:

 Ok, well I suppose we can avoid spamming the list with our off topic
 ramblings and get back to the topic on hand (and behave like adults, which I
 assume all of you'se are), and clear up a few things up.

 VPN's and such can serve as a method to stop people on the local network
 from sniffing your connection (assuming a reliable encryption scheme is in
 place, and you have not been MITM-ed during the key exchange or whatever -
 crypto is NOT my interest!). However, we can reliably assume that the VPN
 provider can sniff your connection and compromise your safety per se, and
 that they WILL cooperate with Law Enforcement.

 Even running your own VPN (OpenVPN) on a VPS you purchase is still risky,
 as the VPS provider can simply take over the box. Etc.

 TL;DR, VPN's are not as safe as some believe for protecting ones anonymity.
 They WILL roll over for LEO and such. Not to mention threats on the LAN
 could compromise you, but I do not know much about how that works on the
 crypto side (however, if someone wants to enlighten me I would be grateful,
 it has piqued my curiosity!)

 Also, NOT surprised the provider rolled over in THAT case.

 *footnote for Christian, etc. I apologise for inciting a bit of off topic
 ranting, merely discussing morals, and how they affect people, and how often
 people do silly things when their logic/morality is compromised, often by
 narcotics and such. But that is for a discussion on morals and the
 psychology/sociology of cybercriminals. The ensuing debate about
 psychadelics and coding was probably my fault, but hey, people have varied
 interests, no? If we are going to act our age (adults, I presume) on this
 list at least display some tolerance for other peoples discussions, and keep
 the anger off the list.


 On Tue, Oct 4, 2011 at 8:06 AM, Ferenc Kovacs tyr...@gmail.com wrote:

 http://vpn.hidemyass.com/vpncontrol/legal.html

 VPN Data

 What we store: Time stamp and IP address when you connect and
 disconnect to our service.

 ...

 Legalities

 Anonymity services such as ours do not exist to hide people from
 illegal activity. We will cooperate with law enforcement agencies if
 it has become evident that your account has been used for illegal
 activities.

 people should read the TOC, AUP and privacy policy especially if they
 are planning to use that service for illegal activities.

 As I mentioned before it is hard to expect that a VPN provider will
 risk his company for your $11.52/month, and maybe they would try it
 for some lesser case, but what Lulsec did was grant, so I'm not
 surprised that they bent.

 On Tue, Oct 4, 2011 at 1:09 AM, xD 0x41 sec...@gmail.com wrote:
  maybe they are law abiding companies? :)
 
  Who were advertising themselves, and acting like they would NEVER do the
  dirty by handing over any payment records etc... wich is half the reason
 i
  believe the people use theose ones, advertising to protect you.. not to
 give
  your infos up, for really, no reason. as they did.
  Law abiding or not, then they should be advertising as a law abiding
  company, and not acting like some hackers-oparadise vpn service.
  xd
 
 
  On 4 October 2011 06:16, Ferenc Kovacs tyr...@gmail.com wrote:
 
  On Mon, Oct 3, 2011 at 10:35 PM, Laurelai laure...@oneechan.org
 wrote:
   On 10/3/2011 10:42 AM, Antony widmal wrote:
   Using an external VPN provider to cover your trace clearly shows
 your
   incompetency and your idiot assumption.
   Trying to blame the VPN provider rather than accepting your mistake
   and learning from it clearly show your 3 years old mentality.
  
   Also, could you please stop posting as GLOW Xd as well ?
   We do not need your schizophrenic script kiddie lolololol, xD,
   hugs,  spamming on this mailing list.
  
   You being on this mailing list is once again not the best idea.
  
   Thanks,
   Antony
   Actually XD and me are two different people. Second issues of privacy
   are always relevant, not understanding that law abiding individuals
   should always be concerned about companies that hand over personal
 info
   at the request of an authority figure are the ones with three year
 old
   mentalities.
 
  maybe they are law abiding companies? :)
  this whole fuss wouldn't have happened, if everybody could just stay a
  law abiding citizen.
 
  --
  Ferenc Kovács
  @Tyr43l - http://tyrael.hu
 
  ___
  Full-Disclosure - We believe in it.
  Charter:

Re: [Full-disclosure] VPN providers and any providers in general...

Here's a great idea that doesn't need LSD or being doped;* shut the fuck up*
.





On Mon, Oct 3, 2011 at 6:31 PM, Laurelai laure...@oneechan.org wrote:

  On 10/3/2011 7:30 AM, doc mombasa wrote:

 yeah ive been in similar situations several times
 unless the dose is too high then its doable hehehehe

  2011/10/3 Darren Martyn d.martyn.fulldisclos...@gmail.com

 People used to LSD can do pretty amazing things. This guy in college was
 throwing a mini-rave/house party at his home, and he was tripping when the
 police came to ask us to turn the music down. He managed to talk to them for
 about 5 minutes, appeared totally fine, and they were none the wiser to his
 incredibly incapacitated condition.


 On Mon, Oct 3, 2011 at 3:16 PM, doc mombasa doc.momb...@gmail.comwrote:

 if you are used to the effects of LSD then its not a problem
 i like to code on psychedelics and/or alcohol myself :)

   2011/10/3 Laurelai laure...@oneechan.org

   On 10/3/2011 7:10 AM, Darren Martyn wrote:

 Nothing wrong with it per se, I was known to enjoy large bottles of
 rum during extended coding sessions. Now I can attest to the massive
 fall-off in epic skillz associated with too much alcohol - my code starts
 OK, gets better, then becomes an epic mess of typoes. I stopped doing that 
 a
 while back as I realized that it impaired my judgement too much.

 Computer crimes are far easier to commit when ones judgement is
 sufficiently impaired - a lot of people I used to associate with took some
 form of intoxicant and claimed it made them a better hacker. (cannabis
 often being one of the drugs of choice, some claim it allowed them to
 visualize it all better...). I personally reckon that the real reason for
 this is that it makes it easier to ignore the fact you are doing something
 wrong.

 TL;DR, intoxicants + misguided computer hackers = bad.

 On Mon, Oct 3, 2011 at 3:36 PM, Laurelai laure...@oneechan.org wrote:

 On 10/3/2011 4:56 AM, Darren Martyn wrote:
  True, I know some hackers who really apply the Ballmers Peak
  (http://xkcd.com/323/) principle... They simply need to dry up :)
 
  Yeah i know quite a few of those myself.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


   I know a guy who codes perl on LSD, writes good code too.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




  The one time i coded under the influence it did not end well...never again
 lol...

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VPN providers and any providers in general...

Manners, on FD list? Are you trying to be funny?






On Mon, Oct 3, 2011 at 7:04 PM, Laurelai laure...@oneechan.org wrote:

  On 10/3/2011 7:57 AM, Christian Sciberras wrote:



  Here's a great idea that doesn't need LSD or being doped;* shut the fuck
 up*.





 On Mon, Oct 3, 2011 at 6:31 PM, Laurelai laure...@oneechan.org wrote:

  On 10/3/2011 7:30 AM, doc mombasa wrote:

 yeah ive been in similar situations several times
 unless the dose is too high then its doable hehehehe

   2011/10/3 Darren Martyn d.martyn.fulldisclos...@gmail.com

 People used to LSD can do pretty amazing things. This guy in college was
 throwing a mini-rave/house party at his home, and he was tripping when the
 police came to ask us to turn the music down. He managed to talk to them for
 about 5 minutes, appeared totally fine, and they were none the wiser to his
 incredibly incapacitated condition.


 On Mon, Oct 3, 2011 at 3:16 PM, doc mombasa doc.momb...@gmail.comwrote:

 if you are used to the effects of LSD then its not a problem
 i like to code on psychedelics and/or alcohol myself :)

   2011/10/3 Laurelai laure...@oneechan.org

   On 10/3/2011 7:10 AM, Darren Martyn wrote:

 Nothing wrong with it per se, I was known to enjoy large bottles of
 rum during extended coding sessions. Now I can attest to the massive
 fall-off in epic skillz associated with too much alcohol - my code 
 starts
 OK, gets better, then becomes an epic mess of typoes. I stopped doing 
 that a
 while back as I realized that it impaired my judgement too much.

 Computer crimes are far easier to commit when ones judgement is
 sufficiently impaired - a lot of people I used to associate with took some
 form of intoxicant and claimed it made them a better hacker. (cannabis
 often being one of the drugs of choice, some claim it allowed them to
 visualize it all better...). I personally reckon that the real reason 
 for
 this is that it makes it easier to ignore the fact you are doing something
 wrong.

 TL;DR, intoxicants + misguided computer hackers = bad.

 On Mon, Oct 3, 2011 at 3:36 PM, Laurelai laure...@oneechan.orgwrote:

 On 10/3/2011 4:56 AM, Darren Martyn wrote:
  True, I know some hackers who really apply the Ballmers Peak
  (http://xkcd.com/323/) principle... They simply need to dry up :)
 
  Yeah i know quite a few of those myself.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


   I know a guy who codes perl on LSD, writes good code too.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




   The one time i coded under the influence it did not end well...never
 again lol...

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


  You are pretty rude guy, didn't your mom ever teach you manners?

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VPN providers and any providers in general...

I'm not sure who's the the one acting like a child, the guy spamming people
with bullshit or the other one telling him to do everyone a favor and shut
up.




On Mon, Oct 3, 2011 at 7:13 PM, Laurelai laure...@oneechan.org wrote:

  On 10/3/2011 8:06 AM, Christian Sciberras wrote:

 Manners, on FD list? Are you trying to be funny?






 On Mon, Oct 3, 2011 at 7:04 PM, Laurelai laure...@oneechan.org wrote:

   On 10/3/2011 7:57 AM, Christian Sciberras wrote:



  Here's a great idea that doesn't need LSD or being doped;* shut the fuck
 up*.





 On Mon, Oct 3, 2011 at 6:31 PM, Laurelai laure...@oneechan.org wrote:

  On 10/3/2011 7:30 AM, doc mombasa wrote:

 yeah ive been in similar situations several times
 unless the dose is too high then its doable hehehehe

   2011/10/3 Darren Martyn d.martyn.fulldisclos...@gmail.com

 People used to LSD can do pretty amazing things. This guy in college was
 throwing a mini-rave/house party at his home, and he was tripping when the
 police came to ask us to turn the music down. He managed to talk to them 
 for
 about 5 minutes, appeared totally fine, and they were none the wiser to his
 incredibly incapacitated condition.


 On Mon, Oct 3, 2011 at 3:16 PM, doc mombasa doc.momb...@gmail.comwrote:

 if you are used to the effects of LSD then its not a problem
 i like to code on psychedelics and/or alcohol myself :)

   2011/10/3 Laurelai laure...@oneechan.org

   On 10/3/2011 7:10 AM, Darren Martyn wrote:

 Nothing wrong with it per se, I was known to enjoy large bottles of
 rum during extended coding sessions. Now I can attest to the massive
 fall-off in epic skillz associated with too much alcohol - my code 
 starts
 OK, gets better, then becomes an epic mess of typoes. I stopped doing 
 that a
 while back as I realized that it impaired my judgement too much.

 Computer crimes are far easier to commit when ones judgement is
 sufficiently impaired - a lot of people I used to associate with took 
 some
 form of intoxicant and claimed it made them a better hacker. (cannabis
 often being one of the drugs of choice, some claim it allowed them to
 visualize it all better...). I personally reckon that the real reason 
 for
 this is that it makes it easier to ignore the fact you are doing 
 something
 wrong.

 TL;DR, intoxicants + misguided computer hackers = bad.

 On Mon, Oct 3, 2011 at 3:36 PM, Laurelai laure...@oneechan.orgwrote:

 On 10/3/2011 4:56 AM, Darren Martyn wrote:
  True, I know some hackers who really apply the Ballmers Peak
  (http://xkcd.com/323/) principle... They simply need to dry up :)
 
  Yeah i know quite a few of those myself.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


   I know a guy who codes perl on LSD, writes good code too.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/




   The one time i coded under the influence it did not end well...never
 again lol...

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


   You are pretty rude guy, didn't your mom ever teach you manners?


  Politeness goes a long long way no matter what sort of environment you are
 in. Screaming at people to shut up just makes you look like a child, if you
 dont like what i have to say dont listen to it.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] VPN providers and any providers in general...